'help' please remove me from the list.

Alan.MCKEEN_at_nats.co.uk

To: "'fedora-list@redhat.com'" <fedora-list@redhat.com>
Date: Mon, 26 Jul 2004 13:36:54 +0100


-- 
 Bob Marcan, Consultant                mailto:bob.marcan@hermes-plus.si
 S&T Hermes Plus d.d.                  tel:           +386 (1) 5895-300
 Slandrova ul. 2                       fax:           +386 (1) 5895-202
 1231 Ljubljana - Crnuce, Slovenia     url:   http://www.hermes-plus.si
------------------------------
Message: 2
Date: Mon, 26 Jul 2004 10:25:21 +0200
From: Michael Schwendt <fedora@wir-sind-cool.org>
Subject: Re: Test with Chkrootkit
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <20040726102521.5ef547fa.fedora@wir-sind-cool.org>
Content-Type: text/plain; charset=US-ASCII
On Sun, 25 Jul 2004 19:09:02 -0700, Norman Nunn wrote:
> In one of my post, I indicated with the upgrade to 0.43, that all the
> original indicators (infections, hidden files and potential Trojan) were
> eliminated from the output.  
Cannot confirm that. v0.43 is the last one from December 2003 and predates
Fedora Core 2. It works fine on Fedora Core 1 (adding option -m to ps for
hidden threads).
> However, /chkrootkit-0.43/chkproc -v specifically list the hidden files
> anyway, and the number of hidden files varies during the run without
> restarting the PC. 
And chkrootkit runs chkproc, too.
------------------------------
Message: 3
Date: Mon, 26 Jul 2004 10:52:17 +0200
From: "david" <davidh@niitsa.com>
Subject: Web Browsers
To: <fedora-list@redhat.com>
Message-ID: <000001c472ed$dbc9d630$060aa8c0@NIITPLK>
Content-Type: text/plain;	charset="us-ascii"
Hi all,
Is there any way to disable all browsers in linux so that they cant
access
the internet via the network???
We are using a router but linux has so many browsers that it by passes
the 
proxy server that I hav set using squid.
Any help very appreciated
david
------------------------------
Message: 4
Date: Mon, 26 Jul 2004 09:54:32 +0100
From: Mark Farmer <farmerma@cromwell.co.uk>
Subject: Re: Web Browsers
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <4104C6C8.1090904@cromwell.co.uk>
Content-Type: text/plain; charset=us-ascii; format=flowed
We control access by blocking the service (port 80) on our firewall and just
allowing the proxy 
server out via port 80. This forces people to use the proxy for web access.
Mark Farmer RHCT
Linux Server Administrator
david wrote:
> Hi all,
> 
> 
> Is there any way to disable all browsers in linux so that they cant
> access
> the internet via the network???
> 
> 
> We are using a router but linux has so many browsers that it by passes
> the 
> proxy server that I hav set using squid.
> 
> 
> Any help very appreciated
> david
> 
> 
------------------------------
Message: 5
Date: Mon, 26 Jul 2004 03:56:27 -0500
From: "Thomas Cameron" <thomas.cameron@camerontech.com>
Subject: Re: Web Browsers
To: "For users of Fedora Core releases" <fedora-list@redhat.com>
Message-ID: <088501c472ee$700d76d0$6e01a8c0@thomas>
Content-Type: text/plain;	charset="iso-8859-1"
----- Original Message ----- 
From: "david" <davidh@niitsa.com>
To: <fedora-list@redhat.com>
Sent: Monday, July 26, 2004 3:52 AM
Subject: Web Browsers
> Hi all,
>
>
> Is there any way to disable all browsers in linux so that they cant
> access
> the internet via the network???
>
>
> We are using a router but linux has so many browsers that it by passes
> the
> proxy server that I hav set using squid.
>
>
> Any help very appreciated
> david
Two solutions come to mind.  Either rpm -e each of the borwsers (Mozilla,
Konquerer, etc.) or just throw up an iptables rule like this on each Linux
workstation:
iptables -A OUTPUT -p tcp --dport 80 -j REJECT
To make it permanent run the commands:
service iptables save
chkconfig iptables on
HTH
Thomas
------------------------------
Message: 6
Date: Mon, 26 Jul 2004 10:57:06 +0200
From: antonio montagnani <anto.montagnani@virgilio.it>
Subject: Re: Web Browsers
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <4104C762.3020406@virgilio.it>
Content-Type: text/plain; charset=us-ascii; format=flowed
david wrote/ha scritto, On/il 26/07/2004 10:52:
>Hi all,
>
>
>Is there any way to disable all browsers in linux so that they cant
>access
>the internet via the network???
>
>
>We are using a router but linux has so many browsers that it by passes
>the 
>proxy server that I hav set using squid.
>
>
>Any help very appreciated
>david
>
>
>  
>
1) do you need browsers for any other task? (i.e. disinstall them)
2) it is not clear to me how you can't disable surfing by squid and / or 
iptables.........
Please mor einfos....
-- 
 Antonio
================================================
 Working with Mozilla 1.7 on Linux Fedora Core 2
================================================
   Utilizzo Mozilla 1.7 su Linux Fedora Core 2
================================================
------------------------------
Message: 7
Date: Mon, 26 Jul 2004 11:11:59 +0200
From: Mattias Ohlsson <info@inprose.com>
Subject: IPSec
To: fedora-list@redhat.com
Message-ID: <1090833119.4104cadf0951c@webmail.namezero.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi,
I need a guide to set up IPSec (tunneling mode) between two networks
(net1<->fedora<-> Internet <->fedora<->net2) with the native tools in Fedora
Core 2.
Google can't help me...
Best regards,
Mattias Ohlsson
Inprose.com
------------------------------
Message: 8
Date: Mon, 26 Jul 2004 11:35:18 +0200
From: Franco <primo@ischianet.com>
Subject: Re: Tomcat installation.
To: travis@wsor.net, For users of Fedora Core releases
	<fedora-list@redhat.com>
Message-ID: <4104D056.8020905@ischianet.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Hi, i use 4 and i have installed it with yum install tomcat from
fedora distribution.
Travis Osterman ha scritto:
> On Sat, 24 Jul 2004 00:39:19 -0400, Jesus M. Rodriguez
> <jmrodri@nc.rr.com> wrote:
> 
>>Franco,
>>
>>Which version of Tomcat? 4 or 5?  Where did you get it? jpackage.org?
>>I'm using the one from jpackage and I had to install the webapps
>>seperately.  By default tomcat5 doesn't have the "intro webapp" hence
>>the 404.  Get tomcat5-admin-webapps and tomcat5-webapps.
>>
>>Looking at the jpackage site, looks like tomcat4 is the same way.
>>
>>I hope this helps.
>>
>>Sincerely,
>>Jesus M. Rodriguez
>>
>>
>>
>>Franco wrote:
>>
>>
>>>Hello,
>>>i have tomcat rpm installed, i have started it but
>>>on the port 8080 the server give me error 404.
>>>What i need to do?
>>>It is already configured to work with apache or i need
>>>to install other software?
>>>Best regards.
>>>
>>>
>>
>>--
>>fedora-list mailing list
>>fedora-list@redhat.com
>>To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
>>
> 
> 
> If I remember right the tomcat rpm has 8080 commented out in the main
> server.xml file.  I have ran into problems with the rpm and now try to
> stick with the standalone version (my $0.02 USD).
> 
> 
------------------------------
Message: 9
Date: Mon, 26 Jul 2004 10:39:26 +0100
From: Douglas Furlong <douglas.furlong@firebox.com>
Subject: Re: Web Browsers
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <1090834766.24388.18.camel@douglas-furlong.firebox.com>
Content-Type: text/plain; charset="us-ascii"
On Mon, 2004-07-26 at 09:54 +0100, Mark Farmer wrote:
> We control access by blocking the service (port 80) on our firewall and
just allowing the proxy 
> server out via port 80. This forces people to use the proxy for web
access.
> 
> Mark Farmer RHCT
> Linux Server Administrator
Another option is to use a transparent proxy configuration.
This automatically redirects all traffic on specified ports through the
proxy server, a user does not know it is happening (until they try and
access a site that does not like proxies).
I don't have time now, but I am sure that a couple of searches for
"transparent proxy iptables squid" will most likely provide you with
some rather fruitful results.
-- 
Douglas Furlong
Systems Administrator
Firebox.com
T: 0870 420 4475
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : /archives/fedora-list/attachments/20040726/61f2b6bd/attachment.bin
------------------------------
Message: 10
Date: Mon, 26 Jul 2004 12:25:49 +0200
From: Giandomenico De Tullio <ghisha@email.it>
Subject: Re: yum installs (aka Who framed 'the site' ?!?!?! ;) )
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <20040726102549.GA1982@Defiant.hackingteam.it>
Content-Type: text/plain; Format=Flowed; DelSp=Yes; charset=ISO-8859-1
On 26/07/2004 05:54:28, John Dangler wrote:
[.....]
> >Wayne~
> >Thanks for the reply.  I tried getting to the dag repository and got
> this
> >message:
> >Damaged or Bad header.info from Dag RPM Repository for Fedora Core
> >This is probably because of a downed server or an invalid header. 
> info
> on a
> >repository.
[....]
> 
> I went to the dag site, and I can access the header and the RPMS
> directories, so I'm not sure why yum isn't getting there...
[userid@host apt.sw.be]# md5sum */*/*/*/*/*/*
9a540cfd35d4f9ddd1437ca43a096b3d  fedora/2/en/i386/dag/headers/header. 
info
2397997a58cc1244a63c806276e37c2d  redhat/fc2/en/i386/dag/headers/ 
header.info
uhm .. two different files ?
Doesn't redhat/fc2/ is symlink to fedora/2/ (or fedora/$releasever/   
thing) ???
xxd of fedora/2/ .... /header.info
0000000: 0000 0000 0000 0000 0000 0000 0000 0000  ................
0000010: 0000 0000 0000 0000 0000 0000 0000 0000  ................
uhmmm ... Houston, we are a problem ;)
... and now .. from a yum check-update:
Finding updated packages
Downloading needed headers
perl-Inline-Python-0-0.20 100% |=========================| 2.0 kB     
00:00
perl-Inline-Python-0-0.20 100% |=========================| 2.0 kB     
00:00
perl-Inline-Python-0-0.20 100% |=========================| 2.0 kB     
00:00
perl-Inline-Python-0-0.20 100% |=========================| 2.0 kB     
00:00
perl-Inline-Python-0-0.20 100% |=========================| 2.0 kB     
00:00
perl-Inline-Python-0-0.20 100% |=========================| 2.0 kB     
00:00
retrygrab() failed for:
   
http://apt.sw.be/dries/fedora/core/2/i386/dries//headers/perl-Inline-Python-
0-0.20-1.1.fc2.dries.i386.hdr
  Executing failover method
failover: out of servers to try
Error getting file  
http://apt.sw.be/dries/fedora/core/2/i386/dries//headers/perl-Inline-Python-
0-0.20-1.1.fc2.dries.i386.hdr
[Errno -1] Header cannot be opened or does not match perl-Inline- 
Python, i386.
( ... TWO problems !?  ;p)
------------------------------
Message: 11
Date: Mon, 26 Jul 2004 11:53:55 +0100
From: Neil Bird <neil@fnxweb.com>
Subject: Fresh FC1 hang/lock-up with sawfish/xterm
To: fedora-list@redhat.com
Message-ID: <4104E2C3.2000107@fnxweb.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
   Have a fresh FC1 install;  whenever I try to replace metacity with 
sawfish, and then run an xterm* the whole thing hangs on me 
(sawfish/gnmoe-session, not a box lock-up).
   I'm absolutely stumped!
   I *think* I can run sawfish safely every time from a remote ssh 
session (DISPLAY=:0.0 sawfish &), but if I try it from the gnome login, 
I'll get a few seconds of activity, then one of sawfish/gnome-session 
hangs on me.  I've even tried unsetting 'SESSION_MANAGER' before running 
sawfish (as that's not set on the 'OK' ssh session), although I note 
there are a couple of other SM-related variables I may try.
   I've even tried on a brand new user account with all default/blank 
settings, and *that* does it!  It all works fnie at home, but my box 
there has been upgraded through RH6.1+ to FC1 (not FC2 yet).
* - I *think* it's only xterm I have grief with.
-- 
[neil@fnx ~]# rm -f .signature
[neil@fnx ~]# ls -l .signature
ls: .signature: No such file or directory
[neil@fnx ~]# exit
------------------------------
Message: 12
Date: Mon, 26 Jul 2004 13:43:43 +0200
From: Botond Kardos <Botond.Kardos@essnet.se>
Subject: Re: Where's the other printing system?
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <04Jul26.134338cest.336333@fwall.essnet.se>
Content-Type: text/plain; charset="us-ascii"
    Do you use GNOME? If so, better try KDE. I don't know the exact
reasons, but system-config-printer, the printer setup GUI under GNOME
fails to set up an SMB connection. While KDE control center works for
me, I even have the LPR/LPRng option (but didn't try it yet).
    Please, let us know if you have success with any of the advices
posted here.
On Sun, 2004-07-25 at 03:59, Dave Washburn wrote:
> On Saturday 24 July 2004 19:04, Scot L. Harris wrote:
> > On Sat, 2004-07-24 at 20:48, Dave Washburn wrote:
> > > Actually, that's the whole problem: I set CUPS to use the SMB shared
> > > printer and it still can't talk to it.  I'm ready to try anything
short
> > > of a sledge hammer at this point.
> >
> > I posted a message in the last few days with details on how I setup
> > linux to windows printing.
> 
> I only just joined today.  Can you point me to the message?
> 
> > I believe the real trick is very careful attention to user permissions
> > and login data when setting up the printer on both the linux and windows
> > side.
> >
> > Make sure you configure samba to be in the same workgroup and use user
> > security.
> 
> Did all that, I've checked the samba configuration, user and login stuff,
a 
> dozen times.  Once again, before with RH9, I switched to LPRng, did
nothing 
> whatsoever else, and it took off like the proverbial bat.  Fedora isn't
even 
> giving me the option AFTER I installed LPRng.  Once I installed it and 
> uninstalled CUPS, the print system switcher (which I looked at just to see
if 
> LPRng would finally show up) told me I had NO printing system installed.
> 
> > With Red Hat 8.0 I had given up on this also.  Once I had it working
> > with FC1 I was able to go back and sort out Red Hat 8.0 printing.  In
> > that case I was unable to the the redhat-config-printer tool, I had to
> > use the CUPS interface to setup the print queue.
> >
> > In FC1 and FC2 I was able use system-config-printer to set everything
> > up.
> 
> I've been into that program until it's sick of me.  No help.  Ditto for
the 
> browser-based CUPS configuration.  It still doesn't work.
> 
> -- 
> Dave Washburn
> http://www.nyx.net/~dwashbur
> Insert clever epigram here...or not
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: /archives/fedora-list/attachments/20040726/230d894c/attachment.htm
------------------------------
Message: 13
Date: Mon, 26 Jul 2004 14:01:59 +0200
From: Botond Kardos <Botond.Kardos@essnet.se>
Subject: Re: Hack attempts
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <04Jul26.140156cest.336011@fwall.essnet.se>
Content-Type: text/plain
On Sat, 2004-07-24 at 18:56, Scot L. Harris wrote:
> On Sat, 2004-07-24 at 12:34, Bruno Wolff III wrote:
> 
> > I disagree. Hardware routers are pretty much just software routers that
> > you don't (generally) have access to the source for, are harder to
update,
> > and may have backdoors as a recent Netgear model did. The router
manufacturers
> > have incentive to put in backdoors to cut support costs.
> > 
> > There are advantages to having a firewall that is on a separate physical
> > machine, but hardwall firewalls aren't magically better than locked
> > down linux boxes not running public services. They may be cheaper,
particularly
> > if you don't have an old box sitting around that you can use for a
firewall.
> > 
> > Even having a separate firewall doesn't buy you that much if you are
protecting
> > linux (or BSD) machines as they have very powerful packet filtering
software.
> > The main advantages are some convenience bringing up new machines (as
they
> > can be attached to the network before being fully hardened) and that
since
> > in theory the firewall should be more secure, it is likely to be able to
> > prevent outbound attacks after a compromise which a packet filter on a
root
> > compromised machine won't be able to do.
> 
> For those that have the skills, time, equipment, money, a hardened linux
> box may be a good alternative.  For the vast majority of people out
> there that really just want to use their system for email, web browsing,
> games, and possibly some actual work, a simple dedicated inexpensive
> router/firewall will do a very good job.  True it does not have all the
> features of a full blown firewall box but then most people don't need
> fine grained access controls or the ability to filter or trap specific
> packets.
> 
> For the price of between 40 and 60 dollars such a firewall can prevent
> most if not all attempts at getting at systems sitting behind it.  The
> kind of probing mentioned here is just the kind of thing that such a
> firewall would deflect very easily.  
> 
> Also, using a dedicated single purpose device usually eliminates a large
> number of the potential holes that a more complex powerful box may
> suffer from if improperly configured.  Less options equal fewer chances
> to miss-configure things.
> 
    I disagree with you and share the opinion of Bruno. If you want to
have other ports open than just simple HTTP or FTP, you'll end up in
spending at least the same amount of hours with configuring your box
like you would spend with your own Linux. (For example I wasn't able to
properly set up an SMC router to let DC++ out/in but filter other
outgoing packets.)
    They're simply cheaper, more silent, consume less power, dissipate
less heap and need less cables. They don't protect better.
------------------------------
Message: 14
Date: Mon, 26 Jul 2004 13:20:01 +0100
From: James Wilkinson <james@westexe.demon.co.uk>
Subject: Re: No network after upgrade to Fedora 2
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <20040726122001.GA3964@howells.westexe.demon.co.uk>
Content-Type: text/plain; charset=us-ascii
Kellie Blackwell wrote:
> I downloaded the isos and burned CDs for my install so I would have to
> download the source to be able to recompile but I can't because I don't
have
> any networking. Aarghh! I have no choice but to get a PCI network card.
Well, there's kernel-source-2.6.5-1.358.i386.rpm on the third install
CD...
James.
-- 
E-mail address: james@ | grasshopotomaus:
westexe.demon.co.uk    | A creature that can leap to tremendous heights...
                       | 
                       | Once.
------------------------------
Message: 15
Date: Mon, 26 Jul 2004 14:20:38 +0200
From: antonio montagnani <anto.montagnani@virgilio.it>
Subject: Re: Memory stick Medion
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <4104F716.9060108@virgilio.it>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Aaron Schlaegel wrote/ha scritto, On/il 26/07/2004 08:17:
> antonio montagnani wrote:
>
>> I have a small question.
>> Why is the procedure of creating a mount point, mounting the device 
>> etc fully automatic when I connect my digital camera?? what is 
>> different?
>
>
> kudzu and updfstab handle auto-mounting of devices.
>
> Unfortunately, they don't automatically mount everything that is a USB 
> storage device.
> Instead they mount devices that mentioned in
> "/etc/updfstab.conf" and "/etc/updfstab.conf.default"
>
> First find out the description as reported by kudzu, this is what is 
> used to match
> in the updfstab.conf files.
>
> `kudzu -s -p -c HD`
>
> Note the description ("desc:") that is listed for the USB device 
> (usually sda).
>
> Copy the flash section out of "/etc/updfstab.conf.default" into 
> "/etc/updfstab.conf" and add a match for the description.
>
> device flash {
>     partition 1
>     match   hd CompactFlash
>     match   hd ImageMate
>     match   hd Flash
>     match   hd JumpDrive
>     match   hd MuVo
>     match   hd ClipDrive
>     match   hd "Generic Traveling Disk"
>     match   hd "Jungsoft NEXDISK"
>     match   hd "Memory Key"
>     match   hd IntelligentStick
>
>     match   hd UniquePartOfYourDescription
> }
>
> Once this works submit a bug to Redhat so that your description can 
> get into the next update.
> Then, next time, it will "just work".
>
>
Let me see if I have your sugegstion clear compared to the other 
friends' posts.
If I complete only the modifications you suggest, the Memory stick 
should be automatically mounted/unmounted and seen in Disk management as 
SDA....is it true???
Let me have your comment.Tnx anybody for great advice
-- 
 Antonio
================================================
 Working with Mozilla 1.7 on Linux Fedora Core 2
================================================
   Utilizzo Mozilla 1.7 su Linux Fedora Core 2
================================================
------------------------------
Message: 16
Date: Mon, 26 Jul 2004 14:22:13 +0200
From: antonio montagnani <anto.montagnani@virgilio.it>
Subject: Re: No network after upgrade to Fedora 2
To: For users of Fedora Core releases <fedora-list@redhat.com>
Message-ID: <4104F775.2020704@virgilio.it>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
James Wilkinson wrote/ha scritto, On/il 26/07/2004 14:20:
>Kellie Blackwell wrote:
>  
>
>>I downloaded the isos and burned CDs for my install so I would have to
>>download the source to be able to recompile but I can't because I don't
have
>>any networking. Aarghh! I have no choice but to get a PCI network card.
>>    
>>
>
>Well, there's kernel-source-2.6.5-1.358.i386.rpm on the third install
>CD...
>
>James.
>
>  
>
No doubt that 8-10 usd are less effort than re-compiling, especially if 
te machine is not very fast as I guess.....  ;-)
-- 
 Antonio
================================================
 Working with Mozilla 1.7 on Linux Fedora Core 2
================================================
   Utilizzo Mozilla 1.7 su Linux Fedora Core 2
================================================
------------------------------
--
fedora-list mailing list
fedora-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-list
End of fedora-list Digest, Vol 5, Issue 362
*******************************************
**********************************************************************
This email and any files transmitted with it are confidential. If you
are not the intended recipient, please notify our Help Desk. Email
postmaster@nats.co.uk immediately.
You should not copy or use this email or attachment(s) for any purpose
nor disclose their contents to any other person.
NATS computer systems may be monitored and communications 
carried on them recorded, to secure the effective operation of the 
system and for other lawful purposes.  
********************************************************************************************************************************************
-- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list

'help' please remove me from the list.

Relevant Pages