FC2 upgrade-X problem
by Ralph Jones
I've just upgraded an FC1 installation to FC2,and run into a problem
getting the X server to launch.
The system had been running Gnome on an ATI Rage 128. After the upgrade, if
I try to boot into run level 5, the X server tries repeatedly and endlessly
to start, usually displaying a blank dark-blue hi-res screen with an X
cursor in the center.
I've changed inittab to boot into run level 3. From there, if I try to do
init 5, I get the same result. However, I can command startx from the
run-level 3 prompt, and the X server comes right up with my old Gnome settings.
Next, I made up a test script that runs all the start scripts in rc5.d.
When I run that, it starts up all the services associated with run level 5
-- the Samba server shows up on the network, and so forth -- and I am no
longer able to run startx. However, if I remove the xfs start script from
this script, I'm again able to bring up startx.
Next, I tried removing the xfs startup script from rc5.d and booting into
run level 5...and that put me back where I started. I still can't get the X
server up except by running startx from the text prompt.
Suggestions? Thanks...
rj
19 years, 8 months
Re: port 25 refused
by Keith Lofstrom
On Tue, 2004-07-20 at 01:06 -0700, Thornton wrote:
> Is this for a server or for home? If its for home your ISP may be
> blocking port 25.
I have a fairly robust solution for blocked ports. I am working on
a writeup now, which should be at http://www.keithl.com/vpncolo.html
before Friday.
The idea is that you set up an external user-mode-linux co-location
site (typically about $20/mo) and put your published IP addresses
and inbound services there. Then you connect an outbound Virtual
Private Network from your internal network to the UML colo.
Now you have only outbound services from your internal network, no
inbound. If your broadband provider blocks ports ( 80=http 25=smtp
22=ssh ) you can terminate the blocked ports at the colo and send
blocked services through the VPN tunnel. If your service provider
rapidly changes your dynamic IP address, or even if they NAT (Network
Address Translate) your feed, you can STILL connect outbound. The
only way your provider can really stop you is to greatly restrict
the outbound ports you can connect to, in which case normal
services don't work. I figure if they (stupidly) cut me down to
ONLY outbound port 80, I could set up my colo with a second IP
address ($1/month extra) that connects port 80 to the VPN instead
of the httpd web server. Your service provider CAN'T block
outbound port 80 without making their service useless.
I send outbound smtp (mail) through the tunnel and out from the
UML colo. While some sites filter spam based on the source IP
address, The net sees mail coming from the same address as my
inbound. If I was to send my outbound through smtp.comcast.net,
I could also get blocked if the Realtime Blackhole Lists (RBL)
decide my provider (Comcast) is a spammer, which I avoid by
ignoring the comcast mail server.
I do Domain Name Service for my websites and colo with dyndns.org.
If my colo provider gets weird, or spammers invade the same IP
address block and get the whole block listed in the RBS, I can
sign up with a different colo company, upload my colo contents
to the new colo (I back it up nightly with Dirvish, www.dirvish.org)
move DNS pointers (dyndns makes this easy), and I am on-the-air in
a new, good IP address neighborhood within a few hours.
Yes, this costs extra money per month, and setup time, but it
avoids all the TOS (terms of service) issues, puts my websites
on a fat pipe, adds major flexibility, and increases security.
And if your server needs are modest, one UML colo can be shared
by many different individual sites, reducing cost further.
Again, I am working on a writeup, and I hope to provide a cookbook
for setting up a VPN-connected colo, which you can critique and use.
Keith
--
Keith Lofstrom keithl(a)ieee.org Voice (503)-520-1993
KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon"
Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs
19 years, 8 months
ksoftirqd
by J.L. Coenders
Hi all,
While transferring some data to my usb disk ksoftirqd went beserk and locked
up almost the entire machine. The only thing I could do was close it.
Anyone know if this is 'default' behaviour for heavy file transfers? Or might
it be another problem?
- Jeroen
19 years, 8 months
Secure Login Problem
by Alexander Valdez
This problem occurs on FC2 and not FC1.
Problem occurs on all 4 machines installed with FC2.
With mozilla I can get to the home page but when I hit the login link I
get the error www2.xxxxx.com cannot be found error.
With FC2 I can login fine to other secure sites but not this particular
one.
When I use mozilla with Windows 2000 it works fine.
What log files and debug tools can I use to figure this one out.
I'm currently on Linux version 2.6.6-1.435.2.3smp
Alex
19 years, 8 months
RE: MORE SSH Hacking: heads-up
by Jenkins, Jeremiah
Not /etc/secure , /var/log/secure....man, I can tell it's friday
-----Original Message-----
From: Jenkins, Jeremiah [mailto:jeremiah.jenkins@neustar.biz]
Sent: Friday, July 30, 2004 5:16 PM
To: 'For users of Fedora Core releases'
Subject: RE: MORE SSH Hacking: heads-up
What does your /etc/secure log say?
There are some scripts around the internet now, where they try to log in via
ssh using "test" and guest with sometimes an admin account
-----Original Message-----
From: jludwig [mailto:wralphie@comcast.net]
Sent: Friday, July 30, 2004 4:12 PM
To: For users of Fedora Core releases
Subject: Re: MORE SSH Hacking: heads-up
On Fri, 2004-07-30 at 05:45, Brian Fahrlander wrote:
> From last night's LogWatch:
> --------------------------------------------------------------------------
>
> sshd:
> Invalid Users:
> Unknown Account: 7 Time(s)
> Unknown Entries:
> authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser=
> rhost=johnstongrain.com : 2 Time(s)
> authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser=
> rhost=smms-mriley09d.chemistry.uq.edu.au : 2 Time(s)
> authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser=
> rhost=211.117.191.70 : 1 Time(s)
> authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser=
> rhost=216.97.110.1 : 1 Time(s)
> authentication failure; logname= uid=0 euid=0 tty=NODEVssh ruser=
> rhost=ccia-062-204-197-193.uned.es : 1 Time(s)
>
> su:
> Sessions Opened:
> brian(uid=500) -> root: 1 Time(s)
>
> ------------------------------------------------------------------------
>
> Ok, guys- what do we do with this? Should we be writing down the
> addresses from which these attempts were made? They're probably all
> 'stooge' addresses, I know, but it might help authorities to know what
> other machines have been compromised...
>
> I'll go save the log somewhere...
>
> ------------------------------------------------------------------------
Search results for: 211.117.191.70
OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU
ReferralServer: whois://whois.apnic.net
NetRange: 210.0.0.0 - 211.255.255.255
CIDR: 210.0.0.0/7
NetName: APNIC-CIDR-BLK2
NetHandle: NET-210-0-0-0-1
Parent:
NetType: Allocated to APNIC
NameServer: NS1.APNIC.NET
NameServer: NS3.APNIC.NET
NameServer: NS4.APNIC.NET
NameServer: NS.RIPE.NET
NameServer: TINNIE.ARIN.NET
NameServer: DNS1.TELSTRA.NET
Comment: This IP address range is not registered in the ARIN
database.
Comment: For details, refer to the APNIC Whois Database via
Comment: WHOIS.APNIC.NET or
http://www.apnic.net/apnic-bin/whois2.pl
Comment: ** IMPORTANT NOTE: APNIC is the Regional Internet
Registry
Comment: for the Asia Pacific region. APNIC does not operate
networks
Comment: using this IP address range and is not able to
investigate
Comment: spam or abuse reports relating to these addresses. For
more
Comment: help, refer to http://www.apnic.net/info/faq/abuse
Comment:
RegDate: 1996-07-01
Updated: 2004-03-30
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3100
OrgTechEmail: search-apnic-not-arin(a)apnic.net
# ARIN WHOIS database, last updated 2004-07-29 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
--
jludwig <wralphie(a)comcast.net>
--
fedora-list mailing list
fedora-list(a)redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
--
fedora-list mailing list
fedora-list(a)redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
19 years, 8 months
Cisco Aironet 350 and FC2
by Steven Kugelmass
Hello. I'm having trouble with my airo card using the later kernel.
I'm on a Dell Insprion 4100. No kernel
options are provided at boot.
kernel-2.6.5-1.358
Works fine. Plug it in, card is recognized, modules load, network
scripts do their thing and
network comes up.
kernel-2.6.6-1.435.2.3
Hangs. Plug it in, /var/log/messages says:
Jul 23 08:57:13 xxx cardmgr[1881]: socket 1: 350 Series Wireless LAN
Adapter
Jul 23 08:57:13 xxx kernel: cs: memory probe 0xa0000000-0xa0ffffff:
clean.
Jul 23 08:57:13 xxx kernel: airo: Probing for PCI adapters
Jul 23 08:57:13 xxx kernel: airo: Finished probing for PCI adapters
Jul 23 08:57:14 xxx kernel: airo: cmd= 111
Jul 23 08:57:14 xxx kernel: airo: status= 7f11
Jul 23 08:57:14 xxx kernel: airo: Rsp0= 2
Jul 23 08:57:14 xxx kernel: airo: Rsp1= 0
Jul 23 08:57:14 xxx kernel: airo: Rsp2= 0
Jul 23 08:57:14 xxx kernel: airo: MAC enabled eth1 0:7:e:b9:3a:6f
That's it. At that point, ifconfig hangs, iwconfig hangs. The machine
cannot even be shut down nicely,
and needs a hard power cycle to get back in the game.
Does anyone have any ideas? Thanks. --sdk
19 years, 8 months
Summer Reading
by Nate
Hello All,
I contacted the list yesterday regarding a problem getting my DSL connection working. I am pleased to report that it is now working with all the help. I was wondering if anyone had suggestions on a good linux book. I have linux for non-geeks, but it is lacking in detail. I guess I should face the fact that I am a geek and find something a little bit more meaty. Has Oprah suggested anything?
Thanks Again,
Nate
--
() ascii ribbon campaign -
/\ against html mail
against microsoft attachments
19 years, 8 months
Service monitoring daemon
by Mark
Hi all,
Is there a service or script that periodically monitors if a given service
on a machine is still running and if not restarts it?
Example:
if "ldirectord ldirectord.httpd.cf status" does not return something
containing "running with pid",
then call "ldirectord ldirectord.httpd.cf restart"
I know this would be a pretty easy 1- or 2-liner into cron for each service,
but maybe there is something that already does this a little better with a
config file for expected results and actions to be taken if the actual
result is different for each service.
Thanks,
MARK
19 years, 8 months
How to stop "at" command e-mail me!
by Jorge Fábregas
Hello all,
I use mpg123 as a morning alarm. I place the job using the "at" command. I'm
always getting output from the job (the mpg123 output bla bla) to my regular
user mail. Fine..I just redirected stdout and stderr:
/usr/local/bin/mpg123 $HOME/musicfile.mp3 > /dev/null 2>&1
However, I still get mail saying "Job XXX Terminated..." I read the man page
and searched Google but there's nothing out there. Anyone knows how to deal
with it?
Thanks,
JOrge
19 years, 8 months