- Linuxers - lists.fsci.in

users have been locked out passwd -l
by Un|tZ 12 Nov '01

12 Nov '01

hi friends i was checking out the passwd -l (to lock a particular account) option on one of my linux systems. I found that it locked the account alrite and then i tried to unlock the account by using the passwd -u option and i failed. i mean, the -u option shows that the account has been unlocked but when i try to login with the same user account, the login fails. Now this has affected all the users on my system. I can't seem to login from any of the users except root. Please help me out from this mess. Thanks in advance Dharmesh _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

2 1

Fwd: Manage your portal from one single control panel !!
by Prakash Shetty 11 Nov '01

11 Nov '01

Dear Parag, Looks like some ones ripping off people selling them PHP Nuke Best Regards Prakash Shetty -----Original Message----- From: "Cybervapi.com" <sales(a)cybervapi.com> To: cruxware(a)yahoo.com Date: Tue, 6 Nov 2001 18:01:55 +0500 Subject: Manage your portal from one single control panel !! From, http://www.cybervapi.com Gujarat, India Hello, How many times have you felt a pain in the neck while updating your portal?? The answer is 'almost every time'. Portal discontinuation has become a common phenomena worldwide, and one of the widely accepted reason is the frequent updating. Its too tough to do that and when its done, its definitely lightens your pocket...a lot. We have develop a comprehensive solution whereby you can manage your complete portal from one single control panel. The power of the program is beyond imagination. The best feature of the program is that you will never have to use FTP to upload any html files or images. The complete portal is maintained by a browser based control panel with a multi user facility with permissions. The key components are: · User Registration · News/Announcement/Event Management System : Any user can post news, announcements, events etc, bull will be displayed only after the admin validates it. Comes with a Topic Manager. · Web based admin - GUI · Yellow Pages (as add-on) · Shopping Cart (as add-on) · Surveys · Photo Gallery · Mailing list · Discussion Forum · Top page Message · pageviews stats page with counter · User customizable box · Themes for registered users · Moderation system · Who links us · Sections manager · Customizable HTML blocks · User and authors edit · Banners Ads system · Search engine - internal · Directory based search engine Links · Download Manager · Calendar · Feedback · Guestbook · People Search · Instant Messenger · FAQ Manager · Reviews .................and much more The pricing are just beyond imagination. Starts from as low as Rs 9999/-. For more info on the program, please visit http://www.cybervapi.com/portal/ Please do get in touch with us if this is of interest to you. We would greatly appreciate you forwarding this mail to the concerned person. Best Regards Owais K Cybervapi.com email : sales(a)cybervapi.com ======================================================== " CYBERVAPI.COM " 'Internet Solutions at its best' Tel: 0260-424287 GSM: +919825130401 Email: sales(a)cybervapi.com Internet: http://www.cybervapi.com Y! msg id: "crm_cybervapi" -------------------------------------------- http://www.gujaratplus.com ' Rediscover Gujarat......Rediscover the Gujarati in You ! http://www.searchgujarat.com ' Gujarat's First and Only Search Engine ' http://www.cybervapi.com/wap ' WAPitised your site today ' ======================================================== Removal Instruction : If you do not want to receive any more offers and opportunities from us and want to be permanently removed from our list, please send a blank email to list(a)cybervapi.com with the Subject Remove and we will not send any further emails to you. Thanking you for your cooperation!

1 0

Red Hat Linux 7.2 CDs....
by Desai Ashish 11 Nov '01

11 Nov '01

Dear Luggers... Any one of having Red Hat Linux 7.2 Cds...? Then can any one of u burn those CDs burn 4 me...? Plz. .....? Regards, [Ashish] ===== [Ashish Desai] __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

5 6

[Announce] NTFS for Linux v 1.4.0
by Philip S Tellis 11 Nov '01

11 Nov '01

Anyone who uses Linux to read NTFS partitions on NT, 2000 and XP should upgrade to NTFS tools 1.4.0. Out now. Includes support for XP, and creation of small NTFS partitions (to make NTFS floppies). Philip -- GIVE: Support the helpless victims of computer error. Visit my webpage at http://www.ncst.ernet.in/~philip/ Read my writings at http://www.ncst.ernet.in/~philip/writings/ MSN philiptellis Yahoo! philiptellis AIM philiptellis ICQ 129711328

1 0

our ftp server down?
by Kishor Bhagwat 10 Nov '01

10 Nov '01

hi, is our ftp server down? incidentally, does it have the mandrake 8.1 iso? regards, kishor _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

Next Meet
by noel seq 10 Nov '01

10 Nov '01

Hi, Is the next meet confirmed at HBCSE at 4.30 pm. How do i get there by train (dadar) The ilug-bom.org.in site shows the meet to be on 31st Aug. Noel. _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

4 4

So You Want To Start Your Own LUG ?
by Bhushan Tiwari 10 Nov '01

10 Nov '01

http://i-want-a-website.com/about-linux/articles/jun00/ask-lug.shtml Bhushan Tiwari _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

Unix Baby Command Man Page
by Bhushan Tiwari 10 Nov '01

10 Nov '01

BABY(1) USER COMMANDS BABY(1) NAME baby - create new process from two parents SYNOPSIS baby -sex m|f [ -name name ] DESCRIPTION Baby is initiated when one parent process polls another server process through a socket connection in the BSD version or through pipes in the System V implementation. Baby runs at a low priority for approximately forty weeks and then terminates with a heavy system load. Most systems require constant monitoring when baby reaches its final stages of execution. Older implementations of baby did not require both initiating processes to be present at the time of completion. In those versions, the initiating process which was not present was awakened and notified of the results upon completion. It has since been determined that the presence of both parent processes results in generally lower system loads at the completion, and thus current versions of baby expect both parent processes to be active during the final stages. Successful completion of baby(1) results in the creation and naming of a new process. Parent processes then broadcast messages to all other processes, local and remote, informing them of their new status. OPTIONS -sex............define the gender of the created process -name.........assign the name name to the new process EXAMPLES % baby -sex f -name Jacqueline % completed successfully on July 9, 1992 at 9:11PM % vital statistics: 8 pounds 3oz, 20 inches, dark hair % The parent process, Kim Dunbar, is reportedly doing fine SEE ALSO cigar(6),dump(5),cry(3) BUGS Despite its complexity, baby only knows one signal, SIGCHLD, (or SIGCLD in the System V implementation), which it uses to contact the parent processes. One or both parent processes must then inspect the baby process to determine the signal's cause. The sleep command may not work as expected on either parent process for some time afterward, as each new instance of baby sends intermittent signals to the parent processes which must be handled by the parents immediately. A baby process will frequently dump core, requiring either or both parent processes to clean up after it. Despite the reams of available documentation on invoking and maintaining baby, most parent processes are overwhelmed. BABY BUG REPORT: Mr. Dunbar distributed the man pages for baby(1) this morning. I wish to confirm some known bugs, give possible solutions, and to warn him of several undocumented bugs. We have also experienced the following undesirable behavior (as documented in the man pages) following the use of the baby(1) command using the syntax shown below: baby -sex f -name Beth (in 1989) baby -sex m -name Daniel (in 1991) For the first 1.552e+07 seconds after the child process was started, neither parent process was able to execute the sleep command when the argument exceeded 600. While this bug was noted in the baby man page, the man page clearly states that the child process will only send SIGCHLD signals. Experience demonstrated that the child process sent SIGURG signals as well as SIGCHLD signals, even though the conditions requiring urgent processind did not exist with the child process. Extensive research indicated that most signals were generally related to an I/O problem with the child process. In almost all cases, the signals indicated the child process either required input, or the output bin was full. In the case of the output bin full, the condition can be easily detected with the diapercheck(1) command using the -smell qualifier. However, in some cases, the child process continued to send the SIGURG signals for unknown reasons after the I/O problem was rectified. In these cases the kill(1) command was considered as a possible alternative, but was considered unacceptable by the system administrator. Additionally, we found that the first child process (-name Beth) began executing whine(2) continuously for no apparent reason beginning 1.5 years after the process startup. This condition appears to be ongoing even though the process has been running for 3.5 years. Unfortunately, it appears that this bug is getting steadily worse. The condition surrounding the bug is still being investigated, and no solution has been discovered to date. ******************************************************************** Anyone w/out a Sense of Humor Is At The Mercy of The Rest of Us. :-) ******************************************************************** Bhushan Tiwari _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

[OT] Balancing of the AVL trees
by Kinjal Sonpal 10 Nov '01

10 Nov '01

Dear all !! I'm here with one more problem. This might not be toatlly related to Linux (other than myself using gcc on Linux), but I'm a bit confused with this problem. So plz help. The question : While balancing a disturbed AVL tree, we normally adapt the bottom-up approach (This is the only approach, I guess), ie, we start by balancing the lowermost subtree in the tree and go on to balance the very next upper tree. Now, my questions is that, is it okay to rebalance an already balanced subtree in order to achieve proper balance of it's parent tree? In other words, if the balance of a subtree is within the aceptable limits, can we still rearrange the tree? Hope ppl on the list won't mind this OT question. Thanks a lot in advance. Regs, Kinjal Sonpal

1 0

System Crash
by Q u a s i 09 Nov '01

09 Nov '01

Folks, I tried to mount a multi-session disk made with Nero and the Box Crashed... I had to use reset. I am running Debian (unstable). quasi _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

(no subject)
by Vishwanath V 09 Nov '01

09 Nov '01

Hi guys, I got my cable net connection yesterday. The client spftware used by my cable wala is cyberoam client. i found out one for linux. But it says authentication failure check username and password...... I have made appropriate changes in the conf files. Any body knows how to make cyberoam client work on windows ......... ___________________________________________________________________ *NEW* Yahoo! Messenger for SMS. Now on your Celforce phone *NEW* Visit http://in.mobile.yahoo.com/smsmgr_signin.html

2 1

Re: [ILUG-BOM] To be a part of the game you have to play game
by nici bhatt 09 Nov '01

09 Nov '01

hi i do appreciate your prompt reply about this mail but you didnt pick my word I am well aware about SAMBA but things which I am looking for is just install one protocol and u r through. You dont have to configure any thing. You tell me how much configuration is involved in getting SAMBA up I know it. how can you aspect one dum user of windows network to do all this configuration. So I am in search of one protocol which will help me to minimize this hard efforts and your desktop is on highway straight-away nici >From: Philip S Tellis <philip.tellis(a)iname.com> >Reply-To: linuxers(a)mm.ilug-bom.org.in >To: <linuxers(a)mm.ilug-bom.org.in> >Subject: Re: [ILUG-BOM] To be a part of the game you have to play game >Date: Thu, 8 Nov 2001 18:36:58 +0530 (IST) > >On Thu, 8 Nov 2001, nici bhatt wrote: > > > so first what i am looking for is protocol the way we look entire > > network in win95/win98/w2k that is uses netbui protocol if you > > remove this and you will see nothing so is there anybody who can > > contribute to this development on linux where by you can easily plug > > your desktop in this kind of protocol and look around full network. > >It's called SaMBa, and there's a client called Linneighbourhood that >acts like network neighbourhood in windows. Allows you to brows the >entire windows network, as well as other samba servers. Needs a little >more work though. > > > > i know this will not help much because your file system will be > > different so it's of no help but still this can help us to the > > protocol level where all services talking to each other in windows > > network and you have that, then your work is much simple to push the > > desktop in this kind of network. We can work out at file system > > level at second stage. > >It has nothing to do with your filesystem. Over the network, there is >no filesystem. Samba takes care of everything. > >Philip > >-- >Television -- teacher, mother, secret lover! > > -- Homer Simpson > Treehouse of Horror V > > >Visit my webpage at http://www.ncst.ernet.in/~philip/ >Read my writings at http://www.ncst.ernet.in/~philip/writings/ > > MSN philiptellis Yahoo! philiptellis > AIM philiptellis ICQ 129711328 > >_______________________________________________ > >http://mm.ilug-bom.org.in/mailman/listinfo/linuxers > _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

4 3

Using Win2000 Boot Loader.
by Abhishek Gupta 09 Nov '01

09 Nov '01

Hi there, Just wanted to ask about how do we boot linux using the windows 2000 boot loader. One way is mentioned in the linuxdocs that we extract first 512 bytes using dd= .... command, and copy this image to the windows drive , adding it to the boot.ini. but this doesnt work et al. So if anyone pl. can help on this..... Regards, Abhishek Gupta.

2 1

Using Win2000 Boot Loader.
by Abhishek Gupta 09 Nov '01

09 Nov '01

Hi there, Just wanted to ask about how do we boot linux using the windows 2000 boot loader. One way is mentioned in the linuxdocs that we extract first 512 bytes using dd= .... command, and copy this image to the windows drive , adding it to the boot.ini. but this doesnt work et al. So if anyone pl. can help on this..... Regards, Abhishek Gupta.

1 0

Re: [ILUG-BOM] Wat abt our Linux in Schools/Colleges initiative
by Bhushan Tiwari 09 Nov '01

09 Nov '01

I suggest is, we can have a big Workshop/Seminar of one full day. Our volunteers will visit different colleges and invite students and also professors for the workshop. Volunteers will give a brief Linux introduction at the colleges and invite them for advanced topics ( Custom Distro, Programming, Linux Localization, Server Setups etc..) at the Seminar. Having seminars at different colleges is very time consuming, we can at the most have only 2-3 seminars a month, by the time we reach 6-7 colleges, their regular exams will be getting started and also with the number of volunteers we have, reaching 6 colleges in 2 months is a big task. The Seminar/Workshop can be held at any college auditorium, or may be at HBCSE. When I had taken a lecture on Linux at Patkar college, Goregaon, students there were more keen to know the alternatives to MS Applications and how could they implement it. Giving them a customised distro wouldn't be helpfull if they don't even know the applications available in Linux. I support the development of customised Distro, instead we can involve interested students from colleges in this process who in turn will be promoting it in their respective circles. Having a common seminar for everyone will help us present in a better way. There won't be a time barrier as when doing at colleges. This way we can target large and interested audience. We can invite private institutions also and can have sponsors for the seminar. Some volunteers can go to commercial organisations for sponsorship. Bhushan Tiwari _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

3 4

Cable net client for LINUX
by Vishwanath V 09 Nov '01

09 Nov '01

Hi guys, I got my cable net connection yesterday. The client spftware used by my cable wala is cyberoam client. i found out one for linux. http://sourceforge.net/projects/cyberoam/ But it says authentication failure check username and password...... I have made appropriate changes in the conf files. Any body knows how to make cyberoam client work on Linux......... ___________________________________________________________________ *NEW* Yahoo! Messenger for SMS. Now on your Celforce phone *NEW* Visit http://in.mobile.yahoo.com/smsmgr_signin.html

1 0

To be a part of the game you have to play game
by nici bhatt 09 Nov '01

09 Nov '01

Hi my subject make's it more clear what my intension is. and that is if you want to push linux as major desktop os then you have to play the game the way your competitor play. so first what i am looking for is protocol the way we look entire network in win95/win98/w2k that is uses netbui protocol if you remove this and you will see nothing so is there anybody who can contribute to this development on linux where by you can easily plug your desktop in this kind of protocol and look around full network. i know this will not help much because your file system will be different so it's of no help but still this can help us to the protocol level where all services talking to each other in windows network and you have that, then your work is much simple to push the desktop in this kind of network. We can work out at file system level at second stage. So is there anyone who can contribute to protocol level development or some one interested in such idiot work I know this sounds like crazy idea but some how I faced this problem and I want to overcome this. So anybody there..? nici _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

5 5

Require Linux based software.
by vinodbhaskar＠sify.com 09 Nov '01

09 Nov '01

Hi friends, We are a Coimbatore based Yarn Marketing company. We are in the process of migrating to Linux. We had installed Mandrake Linux 8.0. Now we are developing our inhouse B2B application in PHP and MySQL For this purpose we require the following software immediately. Please let us know where these software will be available at Mumbai and what will be the cost if any. The software required are 1. Groupware Server for Linux 2. IBM Websphere 3. Transaction Server (BEA Weblogic) 4. Security Server for Linux (SSL) 128 bit encryption using DES 16 bit chaining 5. MYSQL with high end replication backup and multiple transaction support. Thank you, Regards, Vinod.B ------------------------------------------------- This mail helped a tree grow. Know more at http://green.sify.com Want to win a PC or Palm Tops or Digital Diaries or T-Shirts? Click here http://promos.sify.com/niit/main.asp?mail

3 2

[OT] cc4.tifr.res.in
by Aarjav Trivedi 08 Nov '01

08 Nov '01

Hello this is probably way OT but someone from cc4.tifr.res.in , the TIFR network tried a TCP attack on my pc. I was running zonealarm on Windows and used Neotrace , so i got the ip address, which led me to the HBCSE website. The only way that I am familiar to HBCSE is that i think this list was previously hosted at HBCSE.TIFR.RES.IN. Any ideas whats happening ? Or am i just getting more nervous than I should be ? regards Aarjav __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

1 0

Red Hat Liux 7.2 CDs...
by Desai Ashish 08 Nov '01

08 Nov '01

Dear Luggers..., Any one of u have Red Hat Linux 7.2 CDs....??? Kindly burn it for me Friend...! PLZ.... Thanx in Advance... Regards, [Ashish] ===== [Ashish Desai] __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

1 0

Re: [ILUG-BOM] OT - will like it....read till end.
by Nikhil Joshi 08 Nov '01

08 Nov '01

>1. Bill Gates earns US$250 every SECOND, that's about US$20 Million Cool! Another interesting site: http://www.quuxuum.org/~evan/bgnw.html Good details about billy's net worth P.S. Please avoid HTML formatting in your mails . I was informed when I joined the list . I guess it's my duty to inform you too :-) In Microsoft Outlook Express click Format-->Plain Text Rgrds Nikhil __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

1 0

ur articles/tips & tricks
by shahazad＠linuxplanet.nu 08 Nov '01

08 Nov '01

hi all, Currently i am developing my own website wherein i have made a section for linux, it would constitute of linux articles, tips & tricks, howto's etc. So if anyone interested in contributing there articles, please mail it to me at shahazad(a)linuxplanet.nu The website will be up & running within a weeks time , the front end is ready and currently i am working on the backend .. Please note that this is voluntary & your name will be intact with your document. thanx rgds </shahazad> -- Get your firstname@lastname email for FREE at http://Nameplanet.com/?su

3 3

RE: [ILUG-BOM] Wat abt our Linux in Schools/Colleges initiative
by Nikhil Karkera 08 Nov '01

08 Nov '01

> > Just last week i was conductin trainin for Novel. > > And guess wat, durin the trainin it just came up > > that > > novell was drawin up a game plan towards attackin > > schools/colleges with Netware/NDS and a whole lot of > > crappy s/w. > > > > I guess it's high time we got into aktion.....I hav > > been tryin to do my bit for the past 1.5 years at > > various Engineerin colleges evangelin abt Open > > Source. Hi, I think in the new engineering syllabus (starting this academic year), First Year students have Unix in their portion (someone please confirm this). In that case they *have* to use Linux on their machines. Regards, Nikhil.

13 27

Fw: [LIH] [commercial] Fw: [TwinCLinG] Linux in a teaspoon
by Dr. Sharukh K. R. Pavri. 08 Nov '01

08 Nov '01

Picked this up on the Linux-India list. Maybe someone might find it useful. --------------------------------------------------------------------- Doc Partha (who's written the linux pre and post installation checklists - both part of the ldp) has been working with several other ilug-hyderabad members on this project for quite some time. It looks really good. -srs ----- Forwarded message from Partha <algolog(a)hd1.vsnl.net.in> ----- From: Partha <algolog(a)hd1.vsnl.net.in> Date: Wed, 07 Nov 2001 11:56:25 +0530 Subject: [TwinCLinG] Linux in a teaspoon Organization: Algologic Research & Solutions X-Mailer: Mozilla 4.76 [en] (Win98; U) Reply-To: ilughyd(a)yahoogroups.com *** "Linux in a Teaspoon" (Ver. 3) *** Looking for an excellent one-stop resource for learning about Linux ? Want a handy one-stop answer for all your questions about Linux ? "Linux in a teaspoon" -- is a one CDROM collection of tutorial material on Linux. the first two versions of "Linux in a teaspoon" were extremely appreciated by those who have used it. "Linux in a Teaspoon" (Ver. 3) is getting ready and will be made only in a limited number of copies. Book your CD today. Tell your friends too. Makes an ideal gift for students of computer science. Can be a handy resource for educational institutions and even seasoned Linux professionals. What does this CD contain ? Over 40 full-length text books + over 200 HOWTO documents covering every aspect of Linux in a profound but readable style + over 120 mini-HOWTOs + tons of tutorial material + numerous links and pointers to more resources on the w-w-web + 70 issues of Linux Gazette (the journal which has answers to almost all your queries on Linux) ...... .... all this spread over 17 000 (yes, seventeen thousand) files in over 3000 (three thousand +) directories, with a single easy-to-use top-level navigational index. How to get a copy ? Book your copy by email: algolog(a)hd1.vsnl.net.in How much does it cost ? Modest price, to meet copying, media costs, delivery and direct overheads only. Details will be sent in reply to your enquiry by email. CDs will be delivered to you (within India) by courier/SPEEDPOST. **** -- --------------------------------------------------------------------- Dr. S. Parthasarathy | Phone: + 91 - 40 - 775 1650 Algologic Research & Solutions | FAX: + 91 - 40 - 775 1135 78 Sancharpuri Colony, Bowenpally P.O. | Secunderabad 500 011 - INDIA | e mail: mailto:algolog@hd1.vsnl.net.in (Note: h-d-one after @ symbol) WWW-URL: http://algolog.tripod.com PGP Public key: http://algolog.tripod.com/publikey.htm -------------------------------------------------------------------- -- Dr. Sharukh K. R. Pavri Mumbai, India.

1 0

Re: [ILUG-BOM] Blocking Porno / Downloads
by nilesh patil 08 Nov '01

08 Nov '01

the best way of protecting the porno ,is use the SQUID GAURD in congestion with SQUID. ----- Original Message ----- From: Sandeep Periwal Sent: Wednesday, November 07, 2001 1:44 PM To: linuxers(a)mm.ilug-bom.org.in Subject: Re: [ILUG-BOM] Blocking Porno / Downloads Yes we are using SQUID. I plan to do that as First step... I have also located a couple lists of black listed site having over '000 os sites. I also plan to do block sie by Key words like "@#$%", "*****". How should I achieve this. Any other suggestions... --Sandeep > Do you use squid proxy..... if YES... use the (access control list) to block > those sites by analysing the logs.... for more info see squid how-to. > lilo > ----- Original Message ----- > From: YAHOO <sandeep_from(a)yahoo.com> > To: <linuxers(a)mm.ilug-bom.org.in> > Sent: Wednesday, November 07, 2001 10:02 AM > Subject: [ILUG-BOM] Blocking Porno / Downloads > > > > Hi, > > > > Is ther any way I can block prono using Linux Firewall or some kown > > application. > > My network is getting too messy and I need a solution ASAP. > > I also need to block downloads like MP3 etc. I have a cable connection it > is > > being misused greatly. > > > > Also can Viruses be blocked using a Firewall ??? > > If "YES", what is the concept behind it.... > > > > Some urgent steps needed .. > > --Sandeep > > > > > > > > _________________________________________________________ > > Do You Yahoo!? > > Get your free @yahoo.com address at http://mail.yahoo.com > > > > _______________________________________________ > > > > http://mm.ilug-bom.org.in/mailman/listinfo/linuxers > > _______________________________________________ > > http://mm.ilug-bom.org.in/mailman/listinfo/linuxers _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com _______________________________________________ http://mm.ilug-bom.org.in/mailman/listinfo/linuxersGet more from the Web. FREE MSN Explorer download : http://explorer.msn.com

1 0

Wat abt our Linux in Schools/Colleges initiative
by noel seq 07 Nov '01

07 Nov '01

>From: "YAHOO" <sandeep_from(a)yahoo.com> >> >Hey Guys.. >I am not really a Techie, but want to be a part of the team... >Do u folks thing there is anything for me to conribute........... >Now don't pull me in to stand & clap, I sure can manage more than that :-) >--Sandeep Yup. Sandeep you echoed my thoughts. I too want to contribute. Regards, Noel. Gnu/Linux registered user #226476 _________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

7 11

ext3, pcq 7.1 , util-linux2.11l , mounting vfat and me face probs
by Ritesh H Shukla 07 Nov '01

07 Nov '01

Hi, 1) I compiled the kernel with EXT3 support in the kernel itself. I downloaded the latest patch.I am using 2.4.13 2) downloaded the util-linux2.11f first installed it 3) downloaded e2fsprogs.. installed.. afte i rebooted my /dev/hda5 partition is not geting mounted properly ls -l shows it as a directory as 8 k and cd says not a directory also during bootup I get a swapon error saying that invalid -e option. booting from an older kernel does not give any such errors... What do i do to solve my problem... -Ritesh __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

5 18

Modem
by Vijay Stevens 07 Nov '01

07 Nov '01

What is the option I have to include in the Modem files to make the modem dial without waiting for the dial tone? Vijay

12 22

Re: [ILUG-BOM] Wat abt our Linux in Schools/Colleges initiative
by Q u a s i 07 Nov '01

07 Nov '01

At 06:53 PM 11/6/01 +0530, you wrote: >On Tue, 6 Nov 2001, Sandeep Periwal <yahoo> wrote: > > > True Philip I agree, but I think if some folks can volunter, may be > > we can do a pilot with one shcool, and if successful add more. May > > be I am too optimistic !! what does ur experience say. > >Well, schools follow a strict syllabus that is not open to >experimentation like colleges are. So that is a real problem. > >Philip Apart from this I doubt that a lot of schools have many computers and free access for students. Computers _may_ be some optional course in some school, but most of the schools have a small lab with a few computers. The thing here would be to introduce the teachers to Linux who in turn will enlighten the students. quasi _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

RE: [ILUG-BOM] Wat abt our Linux in Schools/Colleges initiative
by Q u a s i 07 Nov '01

07 Nov '01

At 05:28 PM 11/6/01 +0530, Philip wrote: >On Tue, 6 Nov 2001, Vaibhav Arya wrote: > > > 3. Admin Desktop: Student Desktop minus EE/MechE packages, plus email > > clients, plus Line of Business apps (accounting, etc) And most important, > > Wine / DosEMU -- To be able to run existing Windows apps that they are used > > to. > >Wine/dosemu cannot run all windows apps. I'd suggest letting admin >stick with windows until these tools are mature enough. Let the college >ease into linux, and then let them ask for the change. Maybe put just >one or two admin machines with linux. > >Also, better than having separate machines for admin/students, I'd >suggest something similar to what the govt in Florida has done. They >have a single very powerful server (11GB RAM), and a separate >application server (also a lot of RAM). The server runs X clients, and >xdm I think. Then, they have several very thin clients - basically >keyboard, display and network card. These boot of a bootprom in the >netcard, connect to the server, and let the user log in directly to xdm. How many machines will be Linuxed (shifted to linux under our initiative '-) in a typical college setting? Do we really require such exotic hardware as with 11GB of ram? Could we not manage with say a P4 or Atholon dual processor with 1-2 GB or ram (with 128Mb(a)Rs.600 right now it seems possible)? And the very thin clients could be replaced with already existing P100Mhz's & 486's & such older hardware? What is happening is that many places the older machines are being neglected as they cannot comfortably run, say O2K or some such hogg software. Most importantly I suppose we must see what the machines are used primarily in college for. I think that programming (for the CS depts.), running special software (for other depts.) and creating reports and other documentation will be a primarily task. quasi _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

Perl in schools
by Philip S Tellis 06 Nov '01

06 Nov '01

This document explains how one guy taught perl to middle school students (std 4, 5, 6). http://home.mindspring.com/~djrassoc01/PoP/Pop1.html And here's the discussion on comp.lang.perl.misc: http://groups.google.com/groups?hl=en&frame=right&th=a2fa149f2fb445bc&seekm… Read both before commenting. Philip -- /* Nobody will ever see this message :-) */ panic("Cannot initialize video hardware\n"); 2.0.38 /usr/src/linux/arch/m68k/atari/atafb.c Visit my webpage at http://www.ncst.ernet.in/~philip/ Read my writings at http://www.ncst.ernet.in/~philip/writings/ MSN philiptellis Yahoo! philiptellis AIM philiptellis ICQ 129711328

1 0

RE: [ILUG-BOM] Wat abt our Linux in Schools/Colleges initiative
by Darshan.Wakchaure＠lntinfotech.com 06 Nov '01

06 Nov '01

Thats a very good idead Vaibhav... Darshan

1 0

Re: [ILUG-BOM] Wat abt our Linux in Schools/Colleges initiative
by Darshan.Wakchaure＠lntinfotech.com 06 Nov '01

06 Nov '01

Hi, The agenda, sure, but what are are we upto - building Linux awareness or community? Awareness i guess will be the right approach, and leave it to the individual to carry it on further by him/herself. A small plan can be chalked out at first place, we can modify and work on it. Darshan

1 0

Re: [ILUG-BOM] Modem string to skip waitfor dialtone
by Q u a s i 06 Nov '01

06 Nov '01

At 08:12 PM 11/5/01 +0530, Philip wrote: >On Mon, 5 Nov 2001, Q u a s i wrote: > > > Or maybe just adding X1 may help. My modem manual says - > > X1 : Hayes Smartmodem 300 compatible responses/all CONNECT responses/blind > > dialing > > > > the blind dialing part says that it starts dialing without waiting > > for dialtone etc. This should work with most modems as most modems > > are Hayes compatible. > >Hayes compatibility does not apply to eXtended commands. These are >modem specifc. Some of them are standard, but many are implemented by >the modem manufacturer specially. That's why you have different modem >drivers for different modems. > >He will have to check his manual for the specific codes for his modem, >or ask someone else with the same mode. I beg to differ. The ATX? commands are from the basic set and hence probably applicable to all Hayes compatible modems.. The eXtended commands (for my modem) start with a '&'. quasi _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

1 0

re: re: NFS problem
by Sagar Sule 05 Nov '01

05 Nov '01

hello all again, well as to two replies from nagarajun and juju.... first of all, no, nagarjun, i do not have a special kernel compiled for the specific client but a precompiled kernel from ltsp.org. they have a variety to choose from depending upon the network card. eg. there is one for ne2000, one for tulip, one for rtl8139 (which i am using since my client has dlink 538tx+ n/w card) there is a generic one too and i tried that one also. and juju, when i said "restart" i physically rebooted the server (where nfs is running) also rebooted the client but the problem still exists. thanx for ur help in advance regards sagar ===== When you have hit rock bottom, The only way you can go is UP! __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

2 1

Preemptible Kernel Patch
by Aarjav Trivedi 05 Nov '01

05 Nov '01

Hi I just read some stuff on the net about the preemptible kernel patch. It seems it does increase the speed of system response for the avg user. (is that what latency means ?) Has anyone tried it ? If so where can i find it ? thanks Aarjav __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

3 2

Wat abt our Linux in Schools/Colleges initiative
by Trevor Warren 05 Nov '01

05 Nov '01

hey all u luggers........ Just last week i was conductin trainin for Novel. And guess wat, durin the trainin it just came up that novell was drawin up a game plan towards attackin schools/colleges with Netware/NDS and a whole lot of crappy s/w. I guess it's high time we got into aktion.....I hav been tryin to do my bit for the past 1.5 years at various Engineerin colleges evangelin abt Open Source. I am of the opinion lets get to it before these other guys grab the moolah outta our aldready impoverished education system. We can pick up clues from the K12 Education initiative in the U.S. Lets get started.......atleast i want to start with 1 Engineernig college all over Maharashtra every 2-3 weeks. Lets see some AKTION..... Trevor Warren ===== ( >- LINUX, It's all about CHOICE -< ) /~\ __ http://www.trevorwarren.com __ /~\ | \) / mailto: trevorwarren(a)yahoo.com \ (/ | |_|_ \ Urgent ->9820349221(a)maxtouch.co.in / / _|_| \___________________________________/ __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

1 0

NFS problem....
by Sagar Sule 04 Nov '01

04 Nov '01

hello all, i am installing a Diskless client. i am using a package from Linux Terminal Server Project(www.ltsp.org ). the package did all my configuration. the problem is once the client boots, it downloads the kernel and then says kernel panic. the error is due to NFS root not found. my main problem is even though the /etc/exports file is updated and i restarted the server just to make sure nfs reads the /etc/exports file, the /proc/fs/nfs/xtab file does not have entries for the exported filesystem. exportsfs does show that the file system is exported. any more ideas why this is happening? thanks sagar ===== When you have hit rock bottom, The only way you can go is UP! __________________________________________________ Do You Yahoo!? Find a job, post your resume. http://careers.yahoo.com

9 13

[tech] [info] Security in Linux
by Philip S Tellis 04 Nov '01

04 Nov '01

<preamble> Here's something I cooked together for my recent lecture at VJTI. For those of you who do not know, there was a workshop for Engg College Faculty on Linux. Nagarjuna and I were guest lecturers. I spoke on Security and the Kernel, while Nagarjuna introduced linux. Here's the security part. I'll post the kernel part in a separate mail. Feel free to correct bugs. This could also be considered a FAQ from the tcpd wrappers thread. Online version available on my writings page (see sig). NOTE: Heavy dependence on files available either on your machine, or on the net. </preamble> Security in Linux (from the linux security FAQ) Definitions: Linux - the kernel of linux based operating systems, which include the GNU/Linux system Cracker - someone who gains unauthorised access to a system. Not to be confused with a hacker. A hacker is really someone who like to play with computers and write good software. The media often tends to confuse the two. Hackers create, Crackers break. IDS - Intrusion detection system. A system that tries to detect if your system has been compromised, and warns you of it. Tripwire - A kind of IDS that checks whether critical system binaries and configuration files have been modified or not. Firewall - a system that filters traffic moving from outside the network to inside, and vice-versa. Port scanner - a program that checks a host to see which ports are open for external connections. It generally does a blind connect on all ports of a host. Some port scanners can do stealth scanning. Security scanner - a program that checks a host for known vulnerabilities. Security scanners generally try to exploit a vulnerability without causing any harmful effects that would happen in a genuine break in. Some exploits are desined to crash a system, and in these cases, the security scanner may well have to crash a system if it is vulnerable. It is better though to be crashed while scanning your own system, than when someone is actually trying to crash you. Introduction Some of the most common questions asked by people trying to secure their linux systems are: What is security? How can I protect myself from a break-in? How secure should my linux box be? Which is the most secure linux distribution? Security, in a nutshell, is ensuring the Confidentiality, Integrity, and Availability of your systems and network. In short, to protect yourself, you should install the most recent security patches for your distro, turn off unused/unrequired services, run the others through tcpwrappers, and instead of telnet/ftp for remote access, use a secure alternative. The rest of this document will attempt to cover in more detail how to go about securing your linux system. Most important is to decide how secure you need to be. You need to assess the risk to you, and base your security on that. risk=(threat*vulnerability*impact) Threat: the probability of being attacked Vulnerability: how easy is it to break in Impact: what is the cost of recovering from an attack You cannot be 100% secure because there will always be security holes that you either do not know about, or are infeasible to patch. When picking a distribution with security in mind, you should really pick one that has secure default values that you can tweak later. There's no point in installing a system that someone breaks into before you even have a chance to secure it. Distributions like Secure Linux (http://www.trustix.net/) and slinux (http://www.slinux.org/) aim to set secure defaults. Most distros do not have secure defaults because this tends to make the system hard for end users to use. Securing a system is really a trade-off between convenience to your users, and protecting their data. In general, never rely on the default installation of any distribution. Consult the Linux Administrator's Security Guide at http://www.seifried.org/lasg/ for information on how to secure specific distributions. Alternately, OpenBSD, was designed from the ground up as a secure unix, and is probably your best choice for a pure unix implementation. OpenBSD servers and firewalls are extremely secure. A good idea would be to set up a rather open internal network, with tight security between the inside and the outside. That way, local users still have all the convenience, while the system is secure from an external threat. There are still two problems with this approach. If you have legitimate users who need to connect to your system remotely, they would be inconvenienced by your external security. This shouldn't be an issue, as opening up your system to one person, can really open it up to the world. On the inside too, if your users cannot be trusted, then lax internal security could hurt you. Your users could compromise your system by simply not setting good passwords, or leaving their terminals logged in while they are away. There have been cases when crackers have walked into offices, and found system passwords pasted on the office bulletin board for everyone's convenience. Although hitherto unheard of in India, companies abroad have been known to place spies in competitor's companies to steal corporate secrets. There's no use in having the ultimate in network security if your employee is simply going to copy all your secrets onto a floppy and walk out with it. Apart from securing each computer system, and the network as a whole, one also needs to physically secure the entire installation. Firewalls To protect your network, you'd use a firewall between your internal network and the rest of the world. A firewall set up is basically a set of rules that tell the firewall whether a given packet is to be allowed through or not. It can also log information on packets passing through, as well as modify or redirect these packets. Setting up a firewall is very well explained in the linux firewall howto (http://www.linuxdoc.org/HOWTO/Firewall-HOWTO.html). In general, you will require to configure IPChains or IPFilter, depending on whether you have a 2.2 or a 2.4 kernel. A firewall is indispensible to the security of a network. Whether it is a dedicated machine or running as a service on another makes a difference. Since a firewall is meant to filter traffic to and from your network, you ideally want it to sit between your network and the rest of the world. Your firewall would have two network interfaces, one of which connects to your network, and the other to the world. Firewall rules decide which packets get from one side to another. A firewall is generally implemented at the kernel level, and can be fast provided it works completely in memory and does not have too many rules. Ideally, you only want your firewall to filter IPs, and let a higher level service handle service based filtering, for example, have tcpd check if anyone is trying to connect to restricted ports on your system, or use a proxy based system to restrict websites that your users may visit. Better logging can be done at these levels, and they are less demanding on the kernel. Services Run only the services that you require and no more. On a desktop system, which you will not access remotely, there should not be any services. Run different levels of services on different machines. You can find out which services are running by using the ps and netstat commands: ps auxfw will show you a tree structure of processes running, while netstat -ap and netstat -altpu will show you which processes are listening on network ports. You may also want to do a port scan of your machine using a tool like nmap, or a security scanner like nessus. Some really unsafe services include rsh, rcp, rexec. Many versions of sendmail and bind have well known security holes. Also disable echo, discard, finger, daytime, chargen and gopher if you don't use them. Wherever possible, use an encrypted protocol rather than a plain text protocol. for example, use ssh instead of telnet/rsh, use scp instead of ftp, use IMAP w/SSL instead of POP3. On a single user system, you should also disable identd, but on a multiuser system, this is a good way of tracking down problem users on your system. You also want to use tcpwrappers to start your services. tcpwrappers are basically an intermediate between inetd and the service that actually serves a connection, like say telnet. Tcpd will check to see if the connecting host is allowed to connect to this service. Different kinds of access control and logging can be done through tcp wrappers. TCPWrappers TCPWrappers, and their associated configuration files /etc/hosts.deny and /etc/hosts.allow help a system administrator set up good access control for his system. First, some background. Most unix systems use what is called a super server to run other servers. The purpose of a superserver is basically to listen on all ports that you want people to connect to, and when a connection is made to that port, it spawns the relevant server. The advantage of such a set up is threefold. Primarily, all these other servers do not need to implement socket io routines. They simply communicate through stdio, and the superserver connects the socket's io streams to stdio before spawning a server. Secondly, we keep our process table small by not running all servers all the time. Only one server runs all the time, and servers that are never required are never started. A server that is required is run only for the duration that it needs to serve a connection. Finally, and really as a consequence of such a set up, we can implement security centrally, and have all servers benefit from it, even if they have no idea that it exists. In fact, these servers know nothing about security at all. Now, in older systems, the superserver was inetd, or the Internet Daemon. In newer systems, it has been replaced with xinetd, which is simply an extended inetd. xinetd can implement security internally, while inetd spawns an external security handler, most commonly tcpd. The configuration files for these servers are usually /etc/inetd.conf and /etc/xinetd.conf, /etc/xinetd.d/*. We aren't concerned too much about the contents of these files, except what services are started by it. Most commonly, the superserver will start services like telnetd, ftpd, rlogind, rshelld, rstatd, fingerd, talkd, ntalkd, etc. Many of these may not be required, and can be stopped. In inetd, this would involve commenting out the relevant line in inetd.conf, while in xinetd, this would involve setting disabled=yes in /etc/xinetd.d/service_name. Disabling these services altogether will cause an inconvenience for your users. For example, you may want to allow nfs connects from certain hosts within your network, but disable it for everyone else. Furthermore, several services have well known exploits, and detecting when someone is trying these is a good early warning system for a possible attack. This is where tcpwrappers, or tcpd (the tcp daemon) as it is known, comes in. TCPWrappers are basically wrappers around your services. It is implemented in two ways, either through the tcp daemon, which starts the requested service after doing access control checks, or through libwrap, which may be linked into the server itself. Either way, the wrappers rely on the files /etc/hosts.{deny,allow}. The full intent and use of tcp wrappers is well documented, and is shipped with all linux distributions. It can be found in /usr/doc/tcp_wrappers/* or /usr/share/doc/tcp_wrappers/*. Here I will outline the most important usage. How exactly does tcpd come in to play? Instead of directly starting the server, inetd can start tcpd, and tell tcpd to start the correct server after performing any checks, etc. that it wants. If one opens /etc/inetd.conf, one will find against the telnet and ftp lines that the daemon to be spawned is tcpd with in.telned/in.ftpd as arguments. telnet stream tcp nowait root /usr/sbin/tcpd in.telnetd The other values on the line aren't important for that discussion, and you'll figure them out soon enough. Now, in execve parlance, the first argument passed in the argument vector corresponds to argv[0], i.e., the name that the program should call itself. tcpd takes this hint, and calls itself in.telnetd (which is what will show up if you list running processes). It performs its checks, and then execs in.telnetd, passing all file descriptors on. Thus, we have tcpd, which has a single access control file, doing checks for most daemons. Further more, since tcpd comes into the picture only while a connection is being estabilished, and leaves the scene thereafter, there is no overhead involved (except for that during checking, which is what we want). Now, not all servers are started through inetd. Many, like sendmail, apache, and sshd, run as standalone servers. These servers can have tcpd compiled into them using libwrap.a and tcpd.h. They will then automatically check with hosts.allow and hosts.deny. Now all these options must be selected while compiling tcpd and libwrap, but the defaults are decently secure anyway. To check the configuration of your tcpd wrappers, use /sbin/tcpdchk. Give it the -v flag for more information. The hosts.{deny,allow} files Wietse Venema, the creator of tcpd, also developed a 'language' for specifying the access control rules that govern who can use which service. These rules are specified in hosts.allow and hosts.deny. The normal strategy is to deny all connections, and explicitly allow only services that you want people connecting to. For eg: your hosts.deny would read like: ALL: ALL This means deny all services to requests from all addresses. Remember that hosts.allow is checked first, then hosts.deny. The first rule that matches is applied, so basically, if a match is not found in hosts.allow, it will be denied. If hosts.deny is empty or missing, then the default is to grant access. The extended acl language also allows deny rules to be specified in hosts.allow, so you really only have to manipulate a single file. Rather than go into the details of all possible configurations, I'll just paste my own hosts.allow file here, and explain it line by line. Intrusion Detection Intrusion Detection is the ability to detect people trying to compromise your system. Intrusion detection is divided into two main categories, host based, and network based. Basically, if you use a single host to monitor itself, you are using a host based IDS, and if you use a single host to monitor your entire network, you are using a network based IDS. Most home users would use a host based IDS, while universities and offices would have a network based IDS. There are many Intrusion Detection Systems (IDS) for linux, the most popular, for host based and network based is snort. Snort is available from http://www.clark.net/~roesch/security.html. Others are portsentry (http://www.psionic.com/abacus/portsentry/) and lids - the Linux Intrusion detection system (http://www.lids.org). Going into the details of each of these is beyond the scope of this document, but all tools have very good documentation. In addition to an IDS, you would also want to use an Integrity checker, which basically makes sure that none of your binaries and critical configuration files have been modified. When a cracker compromises a system, the first thing he's likely to do, is create a backdoor for himself. There have been many instances where critical binaries like the ssh daemon have been replaced with trojaned versions that capture passwords and mail them back to the cracker. This then gives the attacker free access to the system, even if the original hole is plugged. Tools like tripwire (http://www.tripwire.com/), AIDE (http://www.cs.tut.fi/~rammer/aide.html), and FreeVeracity (http://www.freeveracity.com/) check the integrity of your binaries. Of the above, FreeVeracity is reputed to be very easy to set up and use. Typically, one would create an integrity database when the system is installed, and update it whenever new binaries are installed. The database should always be backed up onto read-only media like a CD. The checker should be run everyday through a cron tab entry, to check all critical files. If the tool finds any discrepancies, it sends a mail to a pre-defined email address. The Integrity Checker should be configured well to prevent false alarms which makes it a hindrance more than an aide. So, how do you know whether you've been compromised or not? CERT has released an advisory to help you identify if an intruder is on your system. The complete document is available at http://www.cert.org/tech_tips/intruder_detection_checklist.html. In short though: - Check your log files, - Look for setuid/setgid files, especially if they are owned by root - Check what your integrity checker has to say about your system binaries - Check for packet sniffers which may or may not be running - If you didn't install it, it shouldn't be there - Check your crontabs and at queues. - Check for services that shouldn't be running on your system - Check /etc/passwd for new accounts/inactive accounts that have suddenly become active Full details, including how to do the above are listed in the abovementioned document. So what do you do once you know that you've been compromised? Well, the first thing is not to panic. It is very important not to disturb any trails that the cracker has left behind, as these can all be used to detect who the attacker was, and even exactly what he did. Very importantly, don't touch anything on the system. Step one is to disconnect the machine from the network. This will not only prevent further attacks, it will also prevent the attacker from covering up his trails if he finds out that he's been caught. To prevent any data from being changed, you should also mount your file systems read-only. Copy all your log files out to another system, or a floppy disk, where you can examine them safely. Analyse the saved data to determine what the attacker did to break in and what he did after that. Restore your system from known pre-compromise backups. Again, CERT has published a white paper on recovering from an attack. It is available at http://www.cert.org/tech_tips/win-UNIX-system_compromise.html Testing Security There are many commercial organisations that will test the security of your system for you. These are costly though. A cheaper alternative may be to use one of the many web based security scanners to test your system. http://www.hackerwhacker.com http://maxvision.net/#free http://www.grc.com http://privacy.net/analyze http://www.secure-me.net/ You shouldn't trust what they tell you, but it will be interesting to monitor your logs and network while an attack is in progress. You can also test yourself by using your own port scanner and security scanners. Nmap (http://www.insecure.org/nmap/) is the most popular and widely used port scanner around, both by black hats and white hats. It can also determine which OS you use, which is what a cracker would need to know to find OS specific vulnerabilities. If nmap can't figure out which OS you're using, that could slow down your attacker for a while. SATAN (Security Analysis Tool for Auditing Networks) that was developed by Dan Farmer of Sun Microsystems, and Wietse Venema (of tcpd fame) from Eindhoven University of Technology, Netherlands, was developed with the specific intent of doing everything that an attacker would do to gain unauthorised access. This tool has been replaced with a next generation version called SAINT (http://www.wwdsi.com/saint/index.html) Nessus (http://www.nessus.org/intro.html) has a plugin based architecture. Vulnerabilities checks are written as plugins, which means that you can check for new holes as they become publicly known, without upgrading your entire binary. Viruses and Trojans The real question in this section is, is linux vulnerable to viruses and trojans. Practically, no. Technically though, it is possible. Due to the design of Linux, it is difficult for viruses to spread far within a system, as they are confined to infecting the user space of the user who executes them. Of course, this is a problem if infected files are launched by root, but as a security conscious individual, you wouldn't be running untrusted files as root, would you? It is theoretically possible for a virus launched by a regular user to escalate its privileges using system exploits; however, a virus with this capability would be quite sizable, and difficult to write. As of this date, few viruses have actually been discovered for Linux, and the ones that have been discovered aren't worth losing sleep over. This will undoubtedly change with time. Worms like l10n and Top Ramen only worked because the systems were insecure to begin with. An insecure ftpd/rstatd was used to automatically gain access to machines, and use them as further launching grounds. Viruses do exist for Linux, but are probably the least significant threat you face. On the other hand, Linux is definitely vulnerable to trojans. A trojan is a malicious program that masquerades as a legitimate application. Unlike viruses, they do not self replicate, but instead, their primary purpose is (usually) to allow an attacker remote access to your computer or its resources. Sometimes, users can be tricked into downloading and installing trojans onto their own computers, but more commonly, trojans are installed by an intruder to allow him future access to your box. Trojans often come packaged as "root kits". A "root kit" is a set of trojaned system applications to help mask a compromise. A root kit will usually include trojaned versions of ps, getty, passwd, At this point in time, virus Scanners for Linux are aimed at detecting and disinfecting data served to Windows hosts by a Linux file/mailserver. This can be useful to help stop the spread of viruses among local, non-Unix machines. Due to the lack of viruses for Linux, there are presently no scanners to detect viruses within the Linux OS, or its applications. Trojans present a greater threat to the Linux OS itself than do viruses, and can be detected by regularly verifying the integrity of your binaries, or by using a rootkitdetector. Trojan Detectors: Chkrootkit: (http://www.chkrootkit.org/) - Checks Linux system for evidence of having been rootkitted. Root Kit Detector: (http://www.vancouver-webpages.com/rkdet/) - A daemon that alerts you if someone atttempts to rootkit you. Virus Scanners for Linux File Servers: AMaViS: (http://www.amavis.org/amavis.html) - A sendmail plugin that scans incoming mmail for viruses. AntiVir for Linux: (http://www.hbedv.com/) - Scans incoming mail and ftp for virusess. Interscan Viruswall: (http://www.antivirus.com/products/isvw/) - A Firewall-1 add-on that scans ftp, htttp, and smtp for viruses. Sophos AntiVirus: (http://www.sophos.com/products/antivirus/savunix.html) - Checks shares, mail attachments, ftp, etc. for viruses. Finally, a system administrator must understand that security is a process. You need to keep yourself up to date with all the latest security news. Subscribe to the securityfocus, cert, and other security related mailing lists. Stick to the comp.os.linux.security newsgroup. That's also a good place to post your queries - if they haven't already been answered. Monitor your log files regularly. Use remote logging to protect against modified log files. Protect your system binaries. Keep them on read-only partitions if required. The only way to protect yourself completely, is to be aware of what is happening all the time. References: The comp.os.linux.security faq The linux security howto (http://www.linuxsecurity.com/docs/Security-HOWTO/) The linux administrator's security guide (http://www.seifried.org/lasg/) The linux firewall and proxy server howto (http://www.linuxdoc.org/HOWTO/Firewall-HOWTO.html) CERT advisories (http://www.cert.org/) Security Focus (http://www.securityfocus.com/) -- Save yourself! Reboot in 5 seconds! Visit my webpage at http://www.ncst.ernet.in/~philip/ Read my writings at http://www.ncst.ernet.in/~philip/writings/ MSN philiptellis Yahoo! philiptellis AIM philiptellis ICQ 129711328

5 7

[OT] gnu@db.ilug-bom.org.in - Mail bounced back
by Amish Mehta 04 Nov '01

04 Nov '01

Hi, Somebody(Nagarjuna?) please check out. It was regarding Cyberoam authentication client. Probably $w macro problem. Missing Cw or Fw entry. ----- Transcript of session follows ----- 553 5.3.5 db.ilug-bom.org.in. config error: mail loops back to me (MX problem?) 554 5.3.5 <gnu(a)db.ilug-bom.org.in>... Local configuration error Amish.

1 0

Re: [ILUG-BOM] cyberoam client?
by Amish Mehta 04 Nov '01

04 Nov '01

Hi, Nagarjuna G. wrote: > >On Sun, 4 Nov 2001, Amish Mehta wrote: >->I could not upload files to Sourceforge because of some reason. >-> Okay I have released a tar.gz file on sourceforge. > > Amish, if you want to upload on our own space( > db.ilug-bom.org.in) send the files to gnu(a)db.ilug-bom.org.in. > If you want a project page we can provide one. Okay thanks Nagarjuna, I have done this too. Amish.

1 0

Re: [ILUG-BOM] cyberoam client?
by Amish Mehta 04 Nov '01

04 Nov '01

Hi Chandrashekhar, Please goto http://briefcase.yahoo.com/amishmm and search there. I could not upload files to Sourceforge because of some reason. Amish.

2 1

Anyone have staroffice 6.0 beta
by Anand 04 Nov '01

04 Nov '01

Hi, Does anyone have staroffice 6.0 beta, which can be burnt and used by me. Anand -- ------------------------------------------------------------------------ Visit www.smbd.org <http://www.smbd.org> for Free Tutorials, Source Codes and Other stuff. ------------------------------------------------------------------------

3 2

iptables error
by Satpal Ramgadia 04 Nov '01

04 Nov '01

Hiee i installed iptables but when ever i restarts the machine i getting errors -A command not found -A command not found -A command not found for each rule i set it shows command not found what is this i couldnt understand i think it couldnt find out the path i stored iptables in /etc/sysconfig n removed ipchains from there so it will take iptables from there n will load but failed to load is the path wrong if the path is wrong where n how to give the path of iptables to load every time machine starts Thanx Satpal please help me out of this prob Satpal __________________________________________________ Do You Yahoo!? Make a great connection at Yahoo! Personals. http://personals.yahoo.com

2 1

[Hurd Orientation]
by Pankaj Jangid 04 Nov '01

04 Nov '01

I recently joined a hurd mailing list. I received this mail in a that list. I want it to share with you. It is a good small introduction to HURD OS. Welcome to the Hurd =================== Welcome to the Hurd. This email is automatically sent at the begining of each month to the help-hurd(a)gnu.org and debian-hurd(a)lists.debian.org mailing lists. This message is intended for a quick orientation to new users. What is the Hurd? ----------------- The Hurd is GNU's Multiserver Microkernel operating system. It is designed with the intention of fixing many of the flaws in *nix. What are these flaws? The arbitrary limits that it imposes on the user: there is not a whole lot that a user can do without special privileges. Consider an NFS filesystem. Only root can mount this on a traditional *nix system. Why is this? It is not that NFS accesses anything dangerous, at least, it is no more dangerous than ftp. However, as a portion of the NFS code lives in the kernel, this presents a potential security problem. In the Hurd, a user can transparently mount a NFS filesystem directly into their home directory without affecting the security of the system as a whole. And this is only the tip of the iceberg. Getting Started --------------- Installation Guides can be found at the following locations: http://web.walfield.org/papers/hurd-installation-guide/ You can find out about ISO images at: http://www.debian.org/ports/hurd/hurd-cd They come with a modified version of the Debian boot floppies making installation relatively simple. GNU Mach uses the drivers found in the Linux 2.0.x kernel. Note, there is no support for PCMCIA. Here is a HCL: http://www.urbanophile.com/arenn/hacking/hurd/hurd-hardware.html Mailing Lists: - bug-hurd(a)gnu.org: Hurd and Mach development. - help-hurd(a)gnu.org: General Hurd questions. - web-hurd(a)gnu.org: Maintenance of the hurd webpages at http://hurd.gnu.org. - debian-hurd(a)lists.debian.org: All things related to Debian GNU/Hurd (especially porting issues). Subscribe in the usual fashion. The Hurd FAQ: http://web.walfield.org/papers/hurd-faq/ Contributions ------------- A common question is: how can I contribute? There are many tasks that need to be done: - Help update the web pages at hurd.gnu.org. Contact web-hurd(a)gnu.org. - Write documentation. - Port applications. Contact debian-hurd(a)lists.debian.org. Look at http://people.debian.org/~jbailey/turtle/group/Debian/index.html - Write code. Contact bug-hurd(a)gnu.org. Look at: http://www.debian.org/ports/hurd/hurd-devel-tasks, <hurd>/tasks and <hurd>/TODO - Send feedback. This is, of course, the most important task of all: Help us help others. Happy Hacking. -- Pankaj Jangid National Centre for Software Technology Alt-Email-ID : pankaj(a)ncst.ernet.in Yahoo-msnger : pankaj_jangid GPG Public Key : http://ashoka.ncst.ernet.in/~pankaj/gpg.txt

1 0

[Commercial] Computer Books for Sale.
by akshaysalkar 04 Nov '01

04 Nov '01

Does any 1 want Computer/Linux Books at a reasonable rate (ie.20%-22%off the normal price) Books in good condition. (Costs after Discount) 1) CGI Programming with Perl - Gundavaran - Rs. 250 - O'Rielly 2) Programming Perl 3/e - Larry Wall - Rs. 450 - O'Rielly 3) Data Structures using C & C++ - Rs. 150 - Prentice Hall 4) Teach yourself HTML4 in 24 hours - Rs. 100 - Techmedia 5) Mastering Foxpro 2.5 Special Edition - Rs. 200 - BPB 6) Begining Linux Programming - Mathews - Rs.450 - Wrox 7) Teach yourself Shell Programming in 24 hours - Veeraghavan - Rs.125 - Techmedia 8) Building Linux Clusters - David Spector - Rs.250 - O'Rielly any wanting any of the above books plz. contact me at email : akshaysalkar(a)indiatimes.com akshay. Get Your Private, Free E-mail from Indiatimes at http://email.indiatimes.com Buy Music, Video, CD-ROM, Audio-Books and Music Accessories from http://www.planetm.co.in

1 0

questions
by abhijeet 03 Nov '01

03 Nov '01

hi this is on the ongoin' topic of content quality on the list. here is a link - perhaps known to many - which would help. this howto would help people to ask questions and perhaps articulate Philip's thoughts on the subject better.......- no offence meant...Philip's a good writer- i found it on eric raymond's home page. http://hurkle.thyrsus.com/~esr/faqs/smart-questions.html ciao abhijeet

1 0

XWinX
by Philip S Tellis 03 Nov '01

03 Nov '01

has anyone tried XwinX? It's similar to VNC, except, it gets rid of the VNC Client - VNC Server link. GPLed software. Runs on windows, to export the desktop to an X11 server. http://www.xwinx.org/ really good Philip -- Help fight continental drift. Visit my webpage at http://www.ncst.ernet.in/~philip/ Read my writings at http://www.ncst.ernet.in/~philip/writings/ MSN philiptellis Yahoo! philiptellis AIM philiptellis ICQ 129711328

3 3

How to install iptables?
by Satpal Ramgadia 03 Nov '01

03 Nov '01

Hiee all, I need to install iptables in RedHat Linux 7.1 What i did in server 7.1 : i installed iptables by passing command "rmmod ipchains" - unloading ipchains "lsmod" - verified unloaded ipchains "modprobe ip_tables" - probed iptables "modprobe iptable_mangle" "modprobe iptable_nat" "modprobe iptable_filter" "modprobe ip_conntrack" after this i can set firewall for that session but when ever i restarts the machine it never saves the iptables in lodules list if i typed : lsmod it shows me again blank no iptables loaded in list so i need iptable permanently iptables in module list can u please help me out of this prob right now i m with ipchains Thanx Satpal __________________________________________________ Do You Yahoo!? Make a great connection at Yahoo! Personals. http://personals.yahoo.com

3 2

Re: pppd error no. 17
by Parul Mathur 03 Nov '01

03 Nov '01

Hi, I think a lot of people will be interested if somebody can post the script he/she is using for authentication in case of a dial up connection (along with instructions on how to modify it, of course). Philip had mentioned that he knew of an easier way. Philip, do let us know... Thanks. Parul Mathur

7 7

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

Linuxers