Subject: Linux-Admin Digest #7
From: Digestifier <[email-masked]>
To: [email-masked]
Date: Wed, 31 Aug 94 18:13:35 EDT

Linux-Admin Digest #7, Volume #2                 Wed, 31 Aug 94 18:13:35 EDT

Contents:
  Re: Newbie Inetd.conf & telnetd question (Rashid Karimov)
  Re: How to FTP recursive directories? (Eric J. Schwertfeger)
  Re: Backing up to QIC-80 (David Wright)
  Re: named keeps crashing (Paul Erkkila)
  Re: Need suggestions on Linux security (Bob Willmot)
  Re: pppd's ip-up doesn't work (Al Longyear)
  Re: Shutting down when running in runlevel 6 (X) (sharpe randall k)
  Re: SOCK_PACKET: Why not reading outgoing packets ? (Chris Gruwier)
  Re: 4P Serial on same IRQ ? (Suman Sahu)
  Re: Shutting down when running in runlevel 6 (X) (Baba Buehler)
  Re: Need suggestions on Linux security (Thilo Wunderlich)
  Re: Linux hangs up and no trace why (John Sundberg)
  Re: Help setting up Smail for Linux (Champ Clark)
  Re: HELP! Intermittent connect & ARPing probs (Kurt M. Hockenbury)
  Re: WTMP question [SOLVED] (Daniel Tran)
  CD-ROMS (Paul Julie)
  Re: Any Slackware 2.0 security probs???  (Carlos Dominguez)
  Re: Host routing patches for DIP... anyone interested?  (Carlos Dominguez)

----------------------------------------------------------------------------

Crossposted-To: comp.unix.admin
From: [email-masked] (Rashid Karimov)
Subject: Re: Newbie Inetd.conf & telnetd question
Date: Wed, 31 Aug 1994 08:40:10 GMT

                Hi !

: S. Kharbanda TM ([email-masked]) wrote:
: : I am trying to setup our internet server to accept telnet connections at
: : a specific port and directly login to an account (so that the user does
: : not see a login prompt). Any ideas on how i go about doing this ?
: : I have seen it done, just don't see how to do it, have looked at the 
: : inetd.conf file trying to figure it out...

:       You need to put the port number that you want the
: program to listen to in /etc/services or the NIS map 'services'
: depending upon which one you are using. Follow the existing

        I'd just say this is _real security hole. You( i mean Mr.Kharbanda)
        should be absolutely sure you want to do it. The only bar for
        possible intruders would be "secret" post number .
        Anyway , account w/o logname & passwd is not good for any Unix box.
        At least , try to restrict it ( chroot() ).

        SY
        RK

------------------------------

From: [email-masked] (Eric J. Schwertfeger)
Subject: Re: How to FTP recursive directories?
Date: 30 Aug 1994 15:36:01 GMT

Daniel Poirot ([email-masked]) wrote:
: In article <[email-masked]>,
: Andrew R. Tefft <[email-masked]> wrote:
: >In article [email-masked], [email-masked] (Jeff Arnholt) writes:
: >>Question: how can I use FTP (or some other solution)
: >>to copy all of the contents of a directory AND everything
: >>below that directory?  IE, I want everything in
: >>/pub/Linux/distributions/Slackware/slakware and below.
: >>Currently, I can only grab one disk at a time.
: >
: >Yes, *but*.
: >
: >However, 30 megs is an awful lot to be transferring in one large file

: I have used the following script for a while (modifying as needed...)
: CHANGE defines for 'mytmp' and 'me'.

Hmmm...  I'll have to try to see what ncftp does with nested directories,
but when I last grabbed the entire slackware tree, it was with

mget a? ap? x? d? xap? ... (etc) 

after I made the directories.  grabbed entire wild-carded directories that
way.  I do know that if you do an mget a1, and the a1 directory doesn't
already exist, ncftp just troughs it in the current directory.

------------------------------

From: [email-masked] (David Wright)
Subject: Re: Backing up to QIC-80
Date: Wed, 31 Aug 1994 12:23:37 GMT

=====BEGIN PGP SIGNED MESSAGE=====

>>>>> "TV" == Thomas Vaughan <[email-masked]> writes:

  TV>   Yes you can use a dos formatted tape. As long as it is
  TV>   in QIC80 format.

        Heh, currently you HAVE to format it under DOS since there isn't
any way to do so under Linux.

                                                        Dave

=====BEGIN PGP SIGNATURE=====
Version: 2.6

iQCVAgUBLmR2Lm++A+T9du0zAQELMAQAxfcoTSpxxXgYvSl5quJzA4ofhf4J7NLu
0EaWRzJrg/yLbhL58OS5ikog2tDnaS+K9jAacSefsbCPyXO25QDYWAsWaG4CN8+c
/0B4qDHu6Tikw+KqVVAxnA7U72fP5reAgB1QaL7C1LIyzQ7pt+T+yashNrBEx2D/
GwiVvR35Flk=
=Qhyx
=====END PGP SIGNATURE=====
--
  ____________________________________________________________________________
 |        /\ /          | Prism Computer Applications        |  David Wright  |
 |      -/--\--         | 14650 Detroit Ave, Suite LL40      | [email-masked] |
 |      /____\          | Lakewood, OH 44107  USA            |  216-228-1400  |

------------------------------

From: [email-masked] (Paul Erkkila)
Subject: Re: named keeps crashing
Date: Wed, 31 Aug 1994 13:00:53 GMT

        We experienced a similar problem with named . It would simply stop
servicing requests after a time. We solved this by moving to a newer version
of named (4.9.?) and disabling nslookup. It seems that nslookup was causing
most of the problems. Debugging output from named showed it going into
a loop of some sort when nslookup was run.

-pee
[email-masked]

------------------------------

From: [email-masked] (Bob Willmot)
Subject: Re: Need suggestions on Linux security
Date: 30 Aug 1994 20:26:38 -0400

[email-masked] (Patrick D. Ashmore) writes:

>On 30 Aug 1994 13:25:07 GMT, Thilo Wunderlich <[email-masked]> wrote:
>> [email-masked] (Gregory P. Smith) writes:

>> [it's too easy to change boot password...]

>> >How can it be too easy to change the boot password?  Is there a security hole

>> get amisetup and u can enter the setup ...
>> Any Simtel archive: msdos/sysutil/amise260.zip

>amisetup and other programs that allow you to backup and tweak your BIOS 
>really do the trick, but consider this... If you have already set the 
>password to something AND set the boot sequence to C:, A:, then how are 
>they going to get to DOS to run the BIOS programs? 

>Patrick

Write your own that runs under Linux.

        Bob Willmot

------------------------------

From: [email-masked] (Al Longyear)
Subject: Re: pppd's ip-up doesn't work
Date: Wed, 31 Aug 1994 13:49:37 GMT

[email-masked] (Gregory Trubetskoy) writes:

>Has anybody used /etc/ppp/ip-up script?

Yes, it works very well for me. I use it to run sendmail and popclient
to do the mail transfers.

>I set one up, but it doesn't seem to be executing at all...

Did you look at the syslogd output? It is written to the local2.warn
location. The log should show that it runs the ip-up script as well as
the termination code if it could not be started unless it was simply
ENOENT ("there is no ip-up file").

>Is there a command line option for it?

No, it is always executed.

>In the man pages for pppd it sais that if an /etc/ppp/ip-up file exists, it 
>is executed as soon as the IP layer is available. I really need this 
>feature, cause I have to do some ifconfiging and routing that pppd itself 
>doesn't allow on the command line.

There is a pending problem with the ip-up and ip-down scripts/programs
with the 2.1.2a version of the code. These scripts inherit the file
handles for the stdin/stdout/stderr and if you redirected them to the
tty device before running pppd, then you can confuse the peer process
should the programs write to stdout/stderr. A solution is to include
the following on each of the commands:

      >/dev/null 2>&1

This will cause the output to be redirected to the null device.

This problem is corrected in the next version of the daemon code.

So, change 'route' (which normally does not generate output unless
there is an error) to be:

 route add -net 10.200.0.0 gw 10.202.23.1 netmask 255.255.0.0 >/dev/null 2>&1

Why are run running 'ifconfig'? There should not need to be a reason
to run ifconfig against the ppp device. You are free to specify any
value for netmask, IP address, and mtu when you run pppd.

>If ip-up doesn't work, is there another ellegant way to see if the IP is 
>setup (that is chat is finished with logging in etc.)?

I suppose that you could probe for the route to be added or the device
to go up. It is not an elegant solution, but it will work.

-- 
Al Longyear           [email-masked]

------------------------------

From: [email-masked] (sharpe randall k)
Subject: Re: Shutting down when running in runlevel 6 (X)
Date: 31 Aug 1994 10:58:50 GMT

[email-masked] (Delemar ) writes:

I have been following this thread for a while. I used to use run level 6
but quit because when I started up xtrems I got strange key mappings,
that is whereas normaly my <- (backspace key) deletes a character back
it now would delete the whole line. The delete key did yhe same thing.
I like my old keymappings but I guess I am too inexperienced to figure
out how to implement them in xdm. I am using the defaults as provided
by Slackware 2.0. I am currnetly using rl 5 and startx in my .login
file. I would prefer using xdm, but won't until I learn how to fix this
problem. I have gone over and over O'Reilly's xsindows administrator's
guide to no avail. I know this is a bit off topic but there seems to be
several knowledgeable people on this thread.

Thanks.

>In article <baba.778287597@ph-meter> [email-masked] (Baba Buehler) writes:

>>[email-masked] (Maxim Spivak) writes:
>>
>>>Question:
>>>  Is changing the default runlevel to 6 all I need to do, or is there 
>>>more. (It works fine, I just want to make sure.)
>[...]
>>> When I typed the 
>>>command, it used to say things like "Sending TERM signal to all 
>>>processes" and "Sending KILL signal to all processes." It no longer does 
>>>so, so at which point is it safe to turn of my machine?
>>
>>
>>the shutdown messages will end up going to one of the VC's, probably 
>>VC1.  try Cntrl-Alt-1 right after you enter the shutdown command.

>Tss, tss, Alt-F6 ! When "shutdown kills X, you go back to VC1, where X was
>started first, so you're on a text term. In runlevel 6, the only text terminal
>available for login is the 6 one, so you might have type the command on
>this terminal, don't you ? To go back to this terminal, hit the Alt-F6 key, it
>should work. at least it works on my linux box...

>                                       DELEMAR Olivier

>       ******************************************************************
>       * DELEMAR Olivier               | Room   : 527                   *
>       * ICP/INPG                      | Phone  : 76-57-48-27           *
>       * 46 Av. Felix VIALLET          | Fax.   : 76-57-47-10           *
>       * 38031 GRENOBLE Cedex - FRANCE | e-mail : [email-masked] *
>       ******************************************************************

------------------------------

From: [email-masked] (Chris Gruwier)
Crossposted-To: comp.os.linux.development,comp.os.linux.help,comp.os.linux.misc
Subject: Re: SOCK_PACKET: Why not reading outgoing packets ?
Date: 31 Aug 1994 15:16:12 GMT

Morten Jammer ([email-masked]) wrote:

: Hi !

: Im developing a networkaccountingprogram and my question is:

: Why can the socket typ SOCK_PACKET only read outgoing packets
: when the interface is in promiscious mode ?

Since on of the patches in 1.1.x you *can* read outgoing packets. I forgot 
which patch it was exactly. At the moment i'm using 1.1.49, and it works
fine.

Chris Gruwier.

------------------------------

From: [email-masked] (Suman Sahu)
Subject: Re: 4P Serial on same IRQ ?
Date: 31 Aug 1994 19:15:27 GMT
Reply-To: [email-masked]

rob ([email-masked]) wrote:

: Ive set up an MS400 card with all 4 ports on irq7, using the AA4RE interrupt
: sharing mod (4x1n4148, 1x4.7kOhm etc).

: Every time I use setserial to set the serial irq's to 7, it locks up the whole
: machine (I know it warns about this).

: I have no parallel ports, scsi is on 5. Ive tried it as ttyS0-3, and also with
: a dual port S0-1 with the 4 port at S2-5, as well as removing the 2 port and
: just trying the 4 port as ttyS4-7 et al. same results all the time. I also tried
: the IRQ commoned to 2/9 instead of 7 (2 is a standard setting for the MS400, 7
: has to be engineered :-)

Try using the ^fourport option.  (I think that's what it is).
Linux defaults to a fourport board (the ^ is like a NOT).  

--
Suman Sahu      [email-masked]

------------------------------

From: [email-masked] (Baba Buehler)
Subject: Re: Shutting down when running in runlevel 6 (X)
Date: 31 Aug 94 14:22:28 GMT
Reply-To: [email-masked]

[email-masked] (sharpe randall k) writes:

>[email-masked] (Delemar ) writes:

>I have been following this thread for a while. I used to use run level 6
>but quit because when I started up xtrems I got strange key mappings,
>that is whereas normaly my <- (backspace key) deletes a character back
>it now would delete the whole line. The delete key did yhe same thing.

try a:

stty erase ^H kill ^C

in .cshrc/.profile

and a file called .Xmodmap in your home directory with the line:

keycode 22 = BackSpace

that should fix the backspace problem.

as for the shutting X down stuff, /etc/inittab determines what VCs are active
in a runlevel of 6.  Slackware 2.0 comes setup with VC6 the only VC with
getty running on it, however all the boot information still goes to VC1,
which is usually the same as /dev/console.

-- 
%>- Baba Z Buehler
%>- Beckman Institute Systems Services, Urbana Illinois
%>- WWW: http://www.beckman.uiuc.edu/groups/biss/people/baba/
%>- PGP Public Key available via WWW & finger [email-masked]

------------------------------

From: [email-masked] (Thilo Wunderlich)
Subject: Re: Need suggestions on Linux security
Date: 31 Aug 1994 16:38:12 GMT

[email-masked] (Patrick D. Ashmore) writes:

>> I wrote: [it's too easy to change boot password...]

>really do the trick, but consider this... If you have already set the 
>password to something AND set the boot sequence to C:, A:, then how are 
>they going to get to DOS to run the BIOS programs? 

Oops, I'm an idiot, I meant the BIOS password and not the boot password.
Though if anyone has access to the console he could reboot the machine
and enter singleusermode ...

Thilo
--
Thilo Wunderlich   [email-masked]
                                 [email-masked]

      GCS d--(---) p c+++ l++ u+++ e@ m- s/+ n--- h* f g+ w+ t r y++

------------------------------

From: [email-masked] (John Sundberg)
Subject: Re: Linux hangs up and no trace why
Date: 31 Aug 1994 09:28:56 -0500
Reply-To: [email-masked]

Jozsef Kadlecsik ([email-masked]) wrote:

> But sometimes the system hangs up, especially when NOBODY uses the system.
> Then we can type in commands and hit Enter, but nothing executed. We can 
> switch between the virtual consoles, that's all.

> We changed the motherboard, the Adaptec card, the disk, the SCSI cable but
> nothing helped.

> There is only one "clue", but it doesn't help us: we get this "failed"
> message at every boot:

> Aug 30 12:23:51 cern kernel: Calibrating delay loop.. ok - 33.22 BogoMips
> Aug 30 12:23:51 cern kernel: failed

> Has anybody ever encountered such a problem?

You are in luck - I hope - I had the same problem - swapped
everything - but one part.  The keyboard.   Swapped the keyboard 
and never had the problem again, except when I put that keyboard back 
in.  

This machine was standalone - so I always thought it was hung 
but really it would not accept anything but switching of VCs.

Switch the keyboards and hopefully things will work.
I troubleshooted this problem for about a month - what
a pain.

If you dont have an extra  keyboard just run top in a VC
and switch to that VC when you think the machine is hung, if 
top never updates then you may have another problem.

-John

------------------------------

From: [email-masked] (Champ Clark)
Crossposted-To: comp.mail.smail
Subject: Re: Help setting up Smail for Linux
Date: 31 Aug 1994 13:52:05 GMT

Paul Bingman ([email-masked]) wrote:
: In article <[email-masked]>,
: Frank Bruno <[email-masked]> wrote:

: First off, please take a few minutes and fix your email return address.  
: I think it's pretty unlikely that you are really on the registered domain 
: of "myhost.subdomain.domain".

        Probably,   but what a wonderful address!  

: >I am tring to get smail going with Linux and have hit the terminal problem.

: Which version of Smail?  Which distribution and version of Linux?

: >I am able to receive mail in, but whenever I e-mail out,. I get the following
: >error:
: >transport smtp: connect : Connection refused

: Does this happen on EVERY smtp try?  Or only on occasional ones to some 
: busy sites?

: There *is* a known problem with Slackware's Smail where smtp connection 
: refusals or timeouts will bounce the mail back to the sending user, 
: rather than queue it up and retry it later.
: -- 
: ------------------------------------------------------------------------
: Paul Bingman                                [email-masked]
: Edgewood Engineering                                     +1 503 222 3846
: Custom software & firmware solutions                 FAX +1 503 223 3071
-- 

------------------------------

Crossposted-To: comp.os.linux.help
From: [email-masked] (Kurt M. Hockenbury)
Subject: Re: HELP! Intermittent connect & ARPing probs
Date: Wed, 31 Aug 1994 14:35:37 GMT

In article <[email-masked]> you wrote:
: My Linux box is going seriously weird.  The machine is refusing all 
: inbound network connections for periods of up to five hours or more.  
: Sometimes it works fine.  Other times it will boot a user off for no 
: apparent reason.  The system is constantly responding to pings but 
: refusing connections to all ports.  The syslog files are filled with 
: lines such as:

: Aug 29 22:34:47 trident kernel: <6>ARP: ARPing my own IP address 
: 35.8.156.105 !

: These problems just started happening a few days ago.  We made no changes 
: to the system since that time or before that time.  It seemed as though 
: it just happened.

It sounds like someone else is using your IP address.

: Can somebody tell me how to rectify this problem?  

Find out who is using your address, and make them stop :-)
Otherwise, change your address.  You network administrator should be
able to help track down who is using your address.

:If not, please tell me 
: what causes the system to "ARP" its IP address.  Also, if you believe 
: this problem lies outside of the system (a network problem) let me hear 
: some of your reasoning [although I doubt this since it responds to pings 
: when it refuses connections].  Any help would be greatly appreciated as 
: my net access is far more limited without this machine.

The reason it "responds" to pings is that you are actually sometimes pinging
a different machine, depending on who's arp responce gets out first.  However,
whoever is using your IP address is not running a system you can log into 
(probably a DOS/Windows or Macintosh box).

When you are on another machine, pinging your machine/the other machine, you
can use the "arp" command to find the ethernet address that you are pinging 
(assuming you are pinging within the same subnet!).  You should see that at 
the times that "your" machine refuses connections, the ethernet address is
not your ethernet address.  (Linux tells you what your ethernet address is
on bootup, so check your logs or reboot to find your address.)

Hope this helps!  We had a similar problem when a fellow here set his linux
box to the same IP address as his Mac Quadra.
        -Kurt Hockenbury

------------------------------

From: [email-masked] (Daniel Tran)
Subject: Re: WTMP question [SOLVED]
Date: Wed, 31 Aug 1994 14:38:54 GMT

In article <[email-masked]> [email-masked] (Daniel Tran) writes:
>Hi,
>The /usr/adm/wtmp file records all logins/logouts.  Upon examining the system, 
>I found that there isn't a file like that.  How do you enable this process?.  
>Can someone help me out.

>TIA
>Daniel Tran - [email-masked]

Many thanks to everybody. WTMP is now working after I issued the following:

touch /var/adm/wtmp

ln -s /var/adm/wtmp /usr/adm/wtmp
ln -s /var/adm/wtmp /etc/wtmp

Daniel Tran - [email-masked]

------------------------------

From: [email-masked] (Paul Julie)
Subject: CD-ROMS
Date: Wed, 31 Aug 1994 20:15:24 GMT

--

I am relatively new to Linux, but I am just going to purchase a
CD-ROM.  Is the Panasonic Double Speed (directly interfaces to Sound
Blast) supported by LINUX????

Last question:

How do I attach my printer... I have a BJC-600, I don't know if
this is even supported????

=======================================
Paul Julie
Applications Specialist

The Toronto Stock Exchange

Phone:  (416)947-4569
Fax:    (416)941-0881
e-mail: [email-masked]
HAM:    VE3PTJ
=======================================

===================================================
The Toronto Stock Exchange

Paul Julie - Applications Specialist

Telephone:      1-416-947-4569
E-mail:         [email-masked]  
===================================================

------------------------------

From: Carlos Dominguez <[email-masked]>
Subject: Re: Any Slackware 2.0 security probs??? 
Date: Wed, 31 Aug 1994 18:02:05 GMT

In article <[email-masked]>, <[email-masked]> writes:

> This package has caused so many people to freak out for no good reason 
> that I am going to move it into the contrib directory on the next 
> release... but for the record, I don't consider it a security hole. On 
> the other hand, ignorant and/or unalert sysadmins certainly are. :^)

.. when I installed my copy of Slackware 2.0 via the Morse-tech CDROM,
I simply said "NO" when it asked to install the three bozo users. Why the 
big stink?

I'd like to know why i'm forced to run ifconfig and route commands before
and after running DIP to connect to my CSLIP host. :)

--
  __  __   __ | .__.  __.  ::::  Carlos Dominguez -  Gophermaster
 |    __| |   | |  | |__   ::::  [email-masked]
 |__ |__| |   | |__| .__|  ::::  [email-masked]
 _________________________       I'm Looking for employment in the NYC area.

------------------------------

From: Carlos Dominguez <[email-masked]>
Subject: Re: Host routing patches for DIP... anyone interested? 
Date: Wed, 31 Aug 1994 18:08:14 GMT

In article <[email-masked]>, <[email-masked]> writes:

> Is this of more general interest?  Mail/respond in news and let me
> know... feel free to suggest a better name for the command too!

I think this is interesting.. After I run dip I run route and see no routes,
check ifconfig and its only set to localhost, not my IP address.

So if i run ifconfig and route after dip, all works fine.

I just installed slackware2.0 (morseCDROM) kernel rev 1.0.9

Thanks,

--

  __  __   __ | .__.  __.  ::::  Carlos Dominguez -  Gophermaster
 |    __| |   | |  | |__   ::::  [email-masked]
 |__ |__| |   | |__| .__|  ::::  [email-masked]
 _________________________       I'm Looking for employment in the NYC area.

------------------------------

** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [email-masked]

You can send mail to the entire list (and comp.os.linux.admin) via:

    Internet: [email-masked]

Linux may be obtained via one of these FTP sites:
    nic.funet.fi				pub/OS/Linux
    tsx-11.mit.edu				pub/linux
    sunsite.unc.edu				pub/Linux

End of Linux-Admin Digest
******************************