From kas na fi.muni.cz Sat Dec 1 00:00:01 2007 From: kas na fi.muni.cz (Jan Yenya Kasprzak) Date: Sat, 1 Dec 2007 00:00:01 +0100 (CET) Subject: Meta-FAQ konference linux@linux.cz Message-ID: <20071130230001.E1A001D1678@odysseus.fi.muni.cz> From sv9voe2x3dfde7erivzqerwer na gmail.com Sat Dec 1 04:41:33 2007 From: sv9voe2x3dfde7erivzqerwer na gmail.com (efp90uzd) Date: Fri, 30 Nov 2007 19:41:33 -0800 (PST) Subject: Calvin Klein Underwear Message-ID: <1eea1083-a4f8-42f0-b0aa-294320063ddb@s8g2000prg.googlegroups.com> Calvin Klein Underwear (CK Underwear) T.T.E. (HongKong) trading Co., Ltd. was established In 1995, We are main businesses include the international trade of wholesale and design branded underwears, such as Calvin klein underwears, D&G,Diesel underwears, Versace underwears, Tommy Hilfiger underwears and so on. The products include all kinds of bras, panties, boxers, briefs, sleepwear and some other apparel. After years development, we possess numerous customers in the world and keep a good relationship with them. Simultaneously, we maintain a good relationship with a great deal of huge wholesale underwear manufacturers. Today, we have became a famous offering trader of branded underwear, garment, shoes, jewelry and watches in Asia and can provide patterns of processing and export for customers all over the world. If you have some questions about our products Please contact us E-Mail:sale2 na ttetrading.com http://www.underwear-wholesaler.com/calvin-klein-underwear.asp Power By: http://www.longhainet.com From syd8jexgk9l8fdxjjix5 na gmail.com Sat Dec 1 06:22:48 2007 From: syd8jexgk9l8fdxjjix5 na gmail.com (syd8jexgk9l8fdxjjix5 na gmail.com) Date: Fri, 30 Nov 2007 21:22:48 -0800 (PST) Subject: women's handbags Message-ID: <71024397-9285-4805-96f7-2a80a57fb349@s8g2000prg.googlegroups.com> women's handbags Although each style is different, several of your bags (the Annie, the Gracie, and the Kathi) seem to be inspired by one of the most popular women's handbag essentials -- the classic tote. What prompted you to choose this type of design? Compare prices for Women's Handbags from top brands such as 55 DSL, Anna Corinna Handbags, Louis Vuitton, Prada, A&F, Gucci and more... T.T.E. (HongKong) International Trading Co,. Ltd. wholesale women's handbags, T.T.E. The leading brand handbag supplier in China. T.T.E. Contact Information: (HQ) 22/F., Harbour Centre, 35 Harbour Road, HongKong. (Branch) No.1238 South of Guangzhou Road, Guangzhou, China. Phone: +86 - 13719002015 Fax: +86 - (20) - 86508285 Email: sale na handbagroom.com http://www.handbagroom.com/women-handbags.asp Power By: http://www.longhainet.com From libor_ml1 na mts.cz Sun Dec 2 21:54:21 2007 From: libor_ml1 na mts.cz (Libor Chocholaty) Date: Sun, 02 Dec 2007 21:54:21 +0100 Subject: Vyber UPS (nahrada APC/MGE) In-Reply-To: References: <02bb01c82cf8$49f56670$0200330a@fortech.local> Message-ID: <47531B7D.4060007@mts.cz> Petr Vileta wrote: > Libor Chocholaty wrote: > >> Ja ted resim podobny problem. Vybiram UPS a jsem z toho jelen. >> Potrebuju neco maleho tak aby cca 200W zarizeni udrzela tak hodinu. >> Koukal jsem se do nabidky LEVI a prodavaji APC a OptiUPS. Do oka me >> brnkly APC Smart UPS 1500 RM2U do racku a pak 2200VA modely APC Smart >> UPS 2200i a OptiUPS PS2200. Parametrove jsou na tom podobne az na dve >> veci: APC je cca 2x drazsi nez Opti a taky vazi 2x tolik. To je divne >> protoze to opti nabizeji s batery packem, takze na objem vychazej cca >> stejne. >> >> Mohl by nekdo zkusenejsi s UPSkama prispet nejake hinty k vyberu UPS? >> >> Libor >> >> > Kdysi jsem resil podobny problem. Zarizeni se spotrebou 50W, ale bylo potreba > ho pri vypadku udrzet pri zivote alespon 24 hodin. Vyresil jsem to dost > netradicne, mozna vam to pomuze. > Instalovala se ta nejlevnejsi UPS (200VA) a na ni se pripojil stary napajec > modemu a na nej mala zarovka 6V(spotreba cca 1W). Pak se koupila normalni > baterie do osobniho auta 50VAh a menic napeti 12V->220V/80W a z tohoto menice > se napajelo ono zarizeni. UPS s pripojenou zarovkou mela jediny ukol - v > pripade nouze vyslat povel pro ukonceni prace operacniho systemu. Ta 220VA UPS > dokazala tu 1W zarovku krmit zhurba tech pozadovanych 24 hodin a pak dosla k > zaveru, ze ji dochazi baterky a poslala signal. Naopak autobaterie tech 50W > dokazala krmit nepretrzite pres 30 hodin, takze tam byla casova rezerva. > Samozrejme se k te autobaterii jeste musela pripojit pomerne vykonna a > "inteligentni" nabijecka. > Jak rikam, bylo to hodne netradicni reseni, ale pokud vim, tak funguje uz 10 > let. Samozrejme kazdych tak 5 let je nutne vymenit akumulatory. > To je zajimavy, ja to zkusim spis s APC Smart-UPS XL 750VA a v pripade, ze to bude potreba, pripojim k tomu pridavnou baterku, maji dve velikosti mensi vazi asi 20kg a vetsi 120kg :-) Libor From stoupa na practisoft.cz Mon Dec 3 02:46:10 2007 From: stoupa na practisoft.cz (Petr Vileta) Date: Mon, 3 Dec 2007 02:46:10 +0100 Subject: Vyber UPS (nahrada APC/MGE) References: <02bb01c82cf8$49f56670$0200330a@fortech.local> Message-ID: Libor Chocholaty wrote: > Petr Vileta wrote: >> Libor Chocholaty wrote: >> >> Instalovala se ta nejlevnejsi UPS (200VA) a na ni se pripojil stary >> napajec modemu a na nej mala zarovka 6V(spotreba cca 1W). Pak se >> koupila normalni baterie do osobniho auta 50VAh a menic napeti >> 12V->220V/80W a z tohoto menice se napajelo ono zarizeni. UPS s >> pripojenou zarovkou mela jediny ukol - v pripade nouze vyslat povel >> pro ukonceni prace operacniho systemu. Ta 220VA UPS dokazala tu 1W >> zarovku krmit zhurba tech pozadovanych 24 hodin a pak dosla k >> zaveru, ze ji dochazi baterky a poslala signal. Naopak autobaterie >> tech 50W dokazala krmit nepretrzite pres 30 hodin, takze tam byla >> casova rezerva. Samozrejme se k te autobaterii jeste musela pripojit >> pomerne vykonna a "inteligentni" nabijecka. >> > To je zajimavy, ja to zkusim spis s APC Smart-UPS XL 750VA a v > pripade, ze to bude potreba, pripojim k tomu pridavnou baterku, maji > dve velikosti mensi vazi asi 20kg a vetsi 120kg :-) > > Libor Jsem rad, ze jsem vas alespon inspiroval ;-) -- Petr Skype: callto://fidokomik Na mail uvedeny v headeru zpravy nema cenu nic posilat, konci to v PR* :-) Odpovidejte na petr na practisoft cz Petr Vileta, Czech republic (My server rejects all messages from Yahoo and Hotmail. Send me your mail from another non-spammer site please.) Please reply to From conf.linux na seritech.cz Mon Dec 3 07:57:48 2007 From: conf.linux na seritech.cz (Martin Blaha) Date: Mon, 03 Dec 2007 07:57:48 +0100 Subject: Meteostanice a linux In-Reply-To: References: Message-ID: <4753A8EC.5050003@seritech.cz> Zdravim, tuto stanici s timto SW mame v praci a vyuzivame k nahlednuti okamziteho stavu www rozhrani a prubezne data ukladame do MySQL. Akorat zatim jsem nezprovoznil nejake rozumne vykreslovani grafu z teto databaze. Martin Zdenek Kaminski napsal(a): > On Thu, 29 Nov 2007, Zdenek Kaminski wrote: > Odpovim si sam. Vhodnou meteostanici muze byt napr. WS3600 a software k > tomu roste open3600.sf.net. > > Pouzivate to nekdo? Nebo neco jineho? From katerina.bubenickova na plbohnice.cz Mon Dec 3 09:51:22 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Mon, 03 Dec 2007 09:51:22 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <9t2525xej.ln2@hubmaier.ceplovi.cz> References: <474C023B.80205@plbohnice.cz> <474BEDEB.9010204@sobriety.cz> <474C035D.9020905@plbohnice.cz> <474C17BD.9000304@plbohnice.cz> <474D6E10.8020908@plbohnice.cz> <474D72C2.4080802@sobriety.cz> <474EB881.6020905@plbohnice.cz> <474EC511.4090001__18984.6073779792$1196344657$gmane$org@plbohnice.cz> <9t2525xej.ln2@hubmaier.ceplovi.cz> Message-ID: <4753C38A.8030506@plbohnice.cz> > Nechci se vnucovat, ale fakt si myslím, že ten rpm.pbone.net by byl > jednodušší. > > Rozhodne se nevnucujete ;-), Uz podruhe se mi nepodarilo stahnout 4,2Gb , tak mozna nakonec rada vyuziju rpm.pbone. Na druhou stranu Suse ma konfiguraky od php a apache tak divne roztahane a upravene (asi kvuli yastu), ze se prekladem jinych zdrojaku dostanu urcite do dalsich problemu. Ale tim, ze clovek nejde vyslapanou nejjednodussi cestou se taky hodne nauci. Napr. Nainstalovala jsem *src.rpm, ukalo se, ze tento src nechci, zadala jsem rpm -e *.src, a hle: balíček * není nainstalován. (zkousela jsem to ruzne, mnohokrat, ubirala ruzne casti nazvu). Znamena to tedy, ze *.src se nezapisuje v suse do databaze nainstalovanych balicku? --Katerina From petr.klima na sobriety.cz Mon Dec 3 09:56:49 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Mon, 03 Dec 2007 09:56:49 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4753C38A.8030506@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <474BEDEB.9010204@sobriety.cz> <474C035D.9020905@plbohnice.cz> <474C17BD.9000304@plbohnice.cz> <474D6E10.8020908@plbohnice.cz> <474D72C2.4080802@sobriety.cz> <474EB881.6020905@plbohnice.cz> <474EC511.4090001__18984.6073779792$1196344657$gmane$org@plbohnice.cz> <9t2525xej.ln2@hubmaier.ceplovi.cz> <4753C38A.8030506@plbohnice.cz> Message-ID: <4753C4D1.3060100@sobriety.cz> Katerina Bubenickova wrote: > Napr. > Nainstalovala jsem *src.rpm, ukalo se, ze tento src nechci, zadala jsem > rpm -e *.src, > a hle: balíček * není nainstalován. (zkousela jsem to ruzne, mnohokrat, > ubirala ruzne casti nazvu). > Znamena to tedy, ze *.src se nezapisuje v suse do databaze > nainstalovanych balicku? Myslim, ze ani v RH ne... On se jenom rozbali do /usr/src. Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From vejsp na svoboda.cz Mon Dec 3 10:39:08 2007 From: vejsp na svoboda.cz (Petr Vejsada) Date: Mon, 3 Dec 2007 10:39:08 +0100 Subject: nabidka prace: linux sitovy administrator Message-ID: <200712031039.08981.vejsp@svoboda.cz> Dobry den, hledam za sebe nahradu na pozici sitovy administrator. Jedna se o vetsi spolecnost se sidlem v Praze 10 - Malesicich v blizkosti stanice metra Depo Hostivar. Strucna napln prace: Servery Slackware linux (cca 6 ks) a IBM AIX (2 ks). Pracovni stanice vetsinou Windows XP, jejich servis je castecne zajistovan externi firmou, cca 120 ks, dale cca 15 notebooku. Ulohy: AIX: IBM Informix IBM DB2 SAP R/3 Samba (Domain Member) Linux: Prakticky vse, co souvisi s internetem (BIND, Apache, Sendmail, SpamAssassin, Clamav, INND (news server), OpenVPN, DHCP, Squid, ProFTPD, Jabber server Ejabberd + ICQ transport, traffic shaper, zajistovani internetu pro najemniky v budove atd.), monitorovaci system Nagios, DB PostgreSQL, Samba (Domain Controler) a spousta dalsich drobnosti. Bylo by dobre umet trochu PHP a skriptovat Bylo by dobre pripravit se zvladnuti High-Availability reseni (na Linuxu Heartbeat, na AIXu ve spolupraci s externim dodavatelem). Kontakt na me: 724 22 68 63 nebo e-mail. Volejte, prosim, ve ctvrtek nebo v patek (jine dny se Vam pravdepodobne nebudu moci venovat). Podam Vam blizsi informace ohledne prace a pokud Vas zaujme, sejdete se s mym (Vasim budoucim) nadrizenym a se mnou. -- Zdraví Petr Vejsada, správce svoboda.cz jabber: admin na jabber.svoboda.cz - toto NENÍ e-mail adresa !!! GPG: 2BDE1F6C Fingerprint klíče FDA9 F8A1 276B 1E28 544E  87CE 3642 C9E8 2BDE 1F6C From lists.subscriber na pragl.cz Mon Dec 3 11:25:41 2007 From: lists.subscriber na pragl.cz (Miroslav Pragl) Date: Mon, 3 Dec 2007 11:25:41 +0100 Subject: server pro instant messaging v mobilech Message-ID: <00d101c83596$dc3f4680$8008a00a@czpgn086> ahoj, po problemech yamiga, chatnu a dalsich zacinam pomalu premyslet ze bych si nainstaloval IM server doma nebo se pridam k nekomu kdo se o neco podobneho snazi. Vite o podobne aktivite v okoli? Priznam se ze o teto problematice vim prd ale principielne se nemuze prilis lisit od jabber (jen jiny protokol a www rozhrani). Dik MP From stoupa na practisoft.cz Mon Dec 3 13:03:53 2007 From: stoupa na practisoft.cz (Petr Vileta) Date: Mon, 3 Dec 2007 13:03:53 +0100 Subject: Meteostanice a linux References: Message-ID: Martin Blaha wrote: > Zdravim, > tuto stanici s timto SW mame v praci a vyuzivame k nahlednuti > okamziteho stavu www rozhrani a prubezne data ukladame do MySQL. > Akorat zatim jsem nezprovoznil nejake rozumne vykreslovani grafu z > teto databaze. > Zkuste Perl/Tk v tom by to melo jit udelat docela rozumne. Existuji moduly na kresleni grafu a pripojeni k databazi pres DBI.pm take neni problem. -- Petr Skype: callto://fidokomik Na mail uvedeny v headeru zpravy nema cenu nic posilat, konci to v PR* :-) Odpovidejte na petr na practisoft cz From martin.konference na seznam.cz Mon Dec 3 13:52:44 2007 From: martin.konference na seznam.cz (Martin =?iso-8859-2?q?=A9pirk?=) Date: Mon, 3 Dec 2007 13:52:44 +0100 Subject: Kopirovani fotek v KDE Message-ID: <200712031352.44320.martin.konference@seznam.cz> Dobry den, openSUSE 10.3, KDE pri kopirovani fotek z fotaku (PTP) do pocitace pomoci KDE (konqueror, krusader, gwenview) se zkopirovanym souboru nastavi prava jen pro cteni (-r--r--r--), coz pri naslednych upravach vadi. Neda se nekde nastavit aby se pri kopirovani z read-only media nekopirovaly i pristupova prava, ale ponechaly se defaultni? Nedoporucujte mi digiKam, vim ze s nim jsou prava OK, ale ten zase stahne fotky kam on chce a ja je musim dodatecne presouvat. Diky, Martin From mcepl na redhat.com Mon Dec 3 14:17:42 2007 From: mcepl na redhat.com (Matej Cepl) Date: Mon, 03 Dec 2007 14:17:42 +0100 Subject: Zdrojove kody u SUSE - kompilace php References: <474C023B.80205@plbohnice.cz> <474BEDEB.9010204@sobriety.cz> <474C035D.9020905@plbohnice.cz> <474C17BD.9000304@plbohnice.cz> <474D6E10.8020908@plbohnice.cz> <474D72C2.4080802@sobriety.cz> <474EB881.6020905@plbohnice.cz> <474EC511.4090001__18984.6073779792$1196344657$gmane$org@plbohnice.cz> <9t2525xej.ln2@hubmaier.ceplovi.cz> <4753C38A.8030506@plbohnice.cz> <4753C4D1.3060100__9247.31949712641$1196672251$gmane$org@sobriety.cz> Message-ID: On Mon, 03 Dec 2007 09:56:49 +0100, Petr Klíma scripst: >> Znamena to tedy, ze *.src se nezapisuje v suse do databaze >> nainstalovanych balicku? Ne, rpm nikdy nikde nezapisuje nikam jinam nežli do /usr/src (nebo kam směřuje %_topdir). Kvůli tomu také je možné instalovat src.rpm jako normální uživatel (má-li tento uživatel práva zápisu do /usr/src). Matěj -- The content of this message is licensed under a Creative Commons Attribution 3.0 License, Some Rights Reserved. http://creativecommons.org/licenses/by/3.0/us/ From mcepl na redhat.com Mon Dec 3 14:19:09 2007 From: mcepl na redhat.com (Matej Cepl) Date: Mon, 03 Dec 2007 14:19:09 +0100 Subject: Zdrojove kody u SUSE - kompilace php References: <474C023B.80205@plbohnice.cz> <474BEDEB.9010204@sobriety.cz> <474C035D.9020905@plbohnice.cz> <474C17BD.9000304@plbohnice.cz> <474D6E10.8020908@plbohnice.cz> <474D72C2.4080802@sobriety.cz> <474EB881.6020905@plbohnice.cz> <474EC511.4090001__18984.6073779792$1196344657$gmane$org@plbohnice.cz> <9t2525xej.ln2@hubmaier.ceplovi.cz> <4753C38A.8030506@plbohnice.cz> Message-ID: On Mon, 03 Dec 2007 09:51:22 +0100, Katerina Bubenickova scripst: > Na druhou stranu Suse ma konfiguraky od php a apache tak divne roztahane > a upravene (asi kvuli yastu), > ze se prekladem jinych zdrojaku dostanu urcite do dalsich problemu. Já jsem měl pocit, že jsem podával URL na zdrojový balíček přímo pro Vámi udávanou verzi SuSE (ve kterých se moc nevyznám, takže se mohu mýlit). Rozhdoně je tam možné nastavit dost přesně jakou verzi a čeho chcete. Matěj -- The content of this message is licensed under a Creative Commons Attribution 3.0 License, Some Rights Reserved. http://creativecommons.org/licenses/by/3.0/us/ From antonin.micka na megasphera.cz Mon Dec 3 18:35:33 2007 From: antonin.micka na megasphera.cz (=?iso-8859-2?q?Anton=EDn_Mi=E8ka?=) Date: Mon, 3 Dec 2007 18:35:33 +0100 Subject: Kopirovani fotek v KDE In-Reply-To: <200712031352.44320.martin.konference@seznam.cz> References: <200712031352.44320.martin.konference@seznam.cz> Message-ID: <200712031835.35180.antonin.micka@megasphera.cz> Dne pondělí 03 prosinec 2007 13:52 Martin Špirk napsal(a): > Dobry den, > > openSUSE 10.3, KDE > pri kopirovani fotek z fotaku (PTP) do pocitace pomoci KDE (konqueror, > krusader, gwenview) se zkopirovanym souboru nastavi prava jen pro cteni > (-r--r--r--), coz pri naslednych upravach vadi. Neda se nekde nastavit aby > se pri kopirovani z read-only media nekopirovaly i pristupova prava, ale > ponechaly se defaultni? Asi maska adresáře??? Jen Tipuji. > Nedoporucujte mi digiKam, vim ze s nim jsou prava OK, ale ten zase stahne > fotky kam on chce a ja je musim dodatecne presouvat. No, já to mám nastavené jak to chci já, a mimo to, skvěle pracuje s podadresáři. Zas tak těžké ho nastavit k obrazu svému není. A baští i simlinky... > Diky, Martin -- Antonín Mička From qaxi na seznam.cz Tue Dec 4 12:43:37 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Tue, 04 Dec 2007 12:43:37 +0100 Subject: Distribuce pro =?UTF-8?B?c3RhcsWhw60gcG/EjcOtdGHEjWUgdmUgZmlyZW1u?= =?UTF-8?B?w61tIHByb3N0xZllZMOt?= Message-ID: <47553D69.1060309@seznam.cz> Zdravím Hledám distro pro starší počítače (Pent. 400Mhz 128MB RAM 800MB HDD) mám základní požadavky: - PAM s ldap (pro integraci do firemní sítě) - NFS (mountnutí /home) (lze i SMB, ale ...) - XWindows (nutné pro browser na webové aplikace) - Firefox (nebo jiný lehčí Gecko prohlížeč) (budu zkoušet i něco postaveného na WebKitu) - ThunderBird nebo Sylpheed - AbiWord a gnumeric postačují ... - Lokalizace do CZ Zatím nejlepší co jsem našel je PuppyLinux který nesplňuje "pouze" pam.ldap a lokalizaci (BTW: máte někdo zkušenost s "rekompilací PuppyLinuxu"?) -- Petr Klíma e-mail: qaxi na seznam.cz From luf na pzkagis.cz Tue Dec 4 14:01:16 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Tue, 4 Dec 2007 14:01:16 +0100 Subject: Kerberos na Gentoo In-Reply-To: <475066EC.8050001@seznam.cz> References: <475066EC.8050001@seznam.cz> Message-ID: <20071204130116.GA19714@pzkagis.cz> > upravení */etc/pam.d/system-auth*. Ovšem nic jiného bez hesla stále > nefunguje. Bez tech konfigu se spatne hleda problem :o( > Přidání entit (dva uživatelé a jeden server s více službami - > primárně SSH) a přidání záznamu do /etc/krb5.keytab Jake jsou zaznamy v krb5.keytab (pro ktere entity)? > Spuštění Kerbera a Admina Admin neni potreba, pokud nechcete pouzivat kadmin vzdalene. > Instalace OpenSSH a konfigurace pro Kerberos v /etc/ssh/sshd_config > kinit pro uživatele, kterého používám Na co kinit? Vzdyt po prihlaseni (pokud sshd pouziva PAM), mate preci jiz listek, ne? > Ovšem klientské ssh (podotýkám ani na serveru) se nechce připojovat > pomocí lístku, ale stále se ptá na heslo. A co zmena v /etc/ssh/ssh_config GSSAPIAuthentication yes ? Luf From petr.klima na sobriety.cz Tue Dec 4 14:01:57 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Tue, 04 Dec 2007 14:01:57 +0100 Subject: Distribuce pro =?UTF-8?B?c3RhcsWhw60gcG/EjcOtdGHEjWUgdmUgZmly?= =?UTF-8?B?ZW1uw61tIHByb3N0xZllZMOt?= In-Reply-To: <47553D69.1060309@seznam.cz> References: <47553D69.1060309@seznam.cz> Message-ID: <47554FC5.60804@sobriety.cz> Mozna bych zkusil Debian. Zakladni instalace bez X nebude mit vic, nez 200-250MB, paměťové nároky při nepoužití GNOME a KDE budou taky rozumne... Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From dejfson na gmail.com Tue Dec 4 14:49:45 2007 From: dejfson na gmail.com (dejfson) Date: Tue, 4 Dec 2007 14:49:45 +0100 Subject: webcam pro linux In-Reply-To: References: Message-ID: Success story: tak nakonec jsem koupil logitech pro 9000. funguje. v jadru je potreba zkompilovat podporu pro v4l2 (v gentoo taky use=v4l2). je potreba stahnout svn verzi linux-uvc driveru. prozatim jsem zkousel dostat obraz jenom na obrazovku pomoci mplayeru. vysledky jsou, rekl bych velmi dobre. kamera funguje i pri pomerne mizernem osvetleni. From lukesh na seznam.cz Tue Dec 4 15:43:45 2007 From: lukesh na seznam.cz (Jaroslav Lukesh) Date: Tue, 4 Dec 2007 15:43:45 +0100 Subject: TCP wrapper na socks proxy Message-ID: <040d01c83684$142bd8e0$6164a8c0@xp> DObrý den, existuje nějaký commandlinový wrapper, kterěmu předhodím program co neumí socks proxy a on pak půjde přes ni? Děkuji, JL. From qaxi na seznam.cz Tue Dec 4 15:45:03 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Tue, 04 Dec 2007 15:45:03 +0100 Subject: Distribuce pro =?UTF-8?B?c3RhcsWhw60gcG/EjcOtdGHEjWUgdmUgZmly?= =?UTF-8?B?ZW1uw61tIHByb3N0xZllZMOt?= In-Reply-To: <47554FC5.60804@sobriety.cz> References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> Message-ID: <475567EF.2080308@seznam.cz> Petr Klíma napsal(a): > Mozna bych zkusil Debian. Zakladni instalace bez X nebude mit vic, nez > 200-250MB, paměťové nároky při nepoužití GNOME a KDE budou taky rozumne... > > Petr > KurŇa NO FLAME Jsem odkojený na RedHatu 3 ;-) a doteď mne nic nedonutilo přejít, takže ostatní distro mi moc neříkaji... Je nějaký markantní rozdíl mezi Ubuntu a Debianem v náročnosti na HDD, CPU a paměť ? -- Petr Klíma e-mail: qaxi na seznam.cz From bar na fi.muni.cz Tue Dec 4 15:54:15 2007 From: bar na fi.muni.cz (Ludek Bartek) Date: Tue, 04 Dec 2007 15:54:15 +0100 Subject: Distribuce pro =?ISO-8859-2?Q?star=B9=ED_po=E8=EDta=E8e_?= =?ISO-8859-2?Q?ve_firemn=EDm_prost=F8ed=ED?= In-Reply-To: <47553D69.1060309@seznam.cz> References: <47553D69.1060309@seznam.cz> Message-ID: <47556A17.40406@fi.muni.cz> Myslim si, ze na tento stroj by mela jit nainstalovat libovolna soucasna distribuce, akorat si clovek musi odpusit (K/G)DE a spokojit se s rozumnym WM. Samozrejme odladit spoustene sluzby. Jinak hodne Lightweight distro je taky Slackware. A nebo pokud netrvate na Linuxu, by tam melo rozumne behat napr. FreeBSD/PC-BSD. Ludek Bartek Petr "Qaxi" Klíma wrote: > Zdravím > > Hledám distro pro starší počítače (Pent. 400Mhz 128MB RAM 800MB HDD) > > mám základní požadavky: > > - PAM s ldap (pro integraci do firemní sítě) > - NFS (mountnutí /home) (lze i SMB, ale ...) > - XWindows (nutné pro browser na webové aplikace) > - Firefox (nebo jiný lehčí Gecko prohlížeč) > (budu zkoušet i něco postaveného na WebKitu) > - ThunderBird nebo Sylpheed > - AbiWord a gnumeric postačují ... > - Lokalizace do CZ > > Zatím nejlepší co jsem našel je PuppyLinux který nesplňuje "pouze" > pam.ldap a lokalizaci > (BTW: máte někdo zkušenost s "rekompilací PuppyLinuxu"?) > > > > From petr.klima na sobriety.cz Tue Dec 4 15:55:13 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Tue, 04 Dec 2007 15:55:13 +0100 Subject: Distribuce pro =?UTF-8?B?c3RhcsWhw60gcG/EjcOtdGHEjWUgdmUgZmly?= =?UTF-8?B?ZW1uw61tIHByb3N0xZllZMOt?= In-Reply-To: <475567EF.2080308@seznam.cz> References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> <475567EF.2080308@seznam.cz> Message-ID: <47556A51.8050900@sobriety.cz> Petr "Qaxi" Klíma wrote: > Jsem odkojený na RedHatu 3 ;-) a doteď mne nic nedonutilo přejít, takže > ostatní distro mi moc neříkaji... No, mne odkojila verze 5.1 CZ, prejit mne prinutilo nereseni zavislosti v RPM (coz uz dnes neni tak uplne pravda). > Je nějaký markantní rozdíl mezi Ubuntu a Debianem v náročnosti na HDD, > CPU a paměť ? Kdyby byl, prekvapilo by mne to, nebot Ubuntu je zalozeno na debianu snad i vcetne repositaru. -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From bar na fi.muni.cz Tue Dec 4 15:57:46 2007 From: bar na fi.muni.cz (Ludek Bartek) Date: Tue, 04 Dec 2007 15:57:46 +0100 Subject: Distribuce pro =?ISO-8859-2?Q?star=B9=ED_po=E8=EDta=E8e_?= =?ISO-8859-2?Q?ve_firemn=EDm_prost=F8ed=ED?= In-Reply-To: <475567EF.2080308@seznam.cz> References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> <475567EF.2080308@seznam.cz> Message-ID: <47556AEA.8050707@fi.muni.cz> Rozdil bude v tom, ze v Debianu si muzete vybrat mensiho otesanka nez je GDE/KDE a tim ten system trosku zrychlit. Jinak si myslim, ze i Fedora, vzhledem k Vasim preferencim, orezana na potrebne minimum by na tom mohla bezet. Musel byste si s ni akorat trosku pohrat (vyhazet nepotrebne sluzby, vyhazet nepotrebne ovladace z jadra, ...). Ludek Bartek Petr "Qaxi" Klíma wrote: > Petr Klíma napsal(a): > >> Mozna bych zkusil Debian. Zakladni instalace bez X nebude mit vic, nez >> 200-250MB, paměťové nároky při nepoužití GNOME a KDE budou taky rozumne... >> >> Petr >> >> > KurŇa NO FLAME > > Jsem odkojený na RedHatu 3 ;-) a doteď mne nic nedonutilo přejít, takže > ostatní distro mi moc neříkaji... > > Je nějaký markantní rozdíl mezi Ubuntu a Debianem v náročnosti na HDD, > CPU a paměť ? > > From lists_mk na wujiman.net Tue Dec 4 15:10:33 2007 From: lists_mk na wujiman.net (Martin Kraus) Date: Tue, 4 Dec 2007 15:10:33 +0100 Subject: Distribuce pro =?utf-8?B?c3RhcsWhw60g?= =?utf-8?B?cG/EjcOtdGHEjWUgdmUgZmlyZW1uw61tIHByb3N0xZllZMOt?= In-Reply-To: <47554FC5.60804@sobriety.cz> References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> Message-ID: <20071204141033.GA5636@finrod> On Tue, Dec 04, 2007 at 02:01:57PM +0100, Petr Klíma wrote: > Mozna bych zkusil Debian. Zakladni instalace bez X nebude mit vic, nez > 200-250MB, paměťové nároky při nepoužití GNOME a KDE budou taky rozumne... no debian pri zakladni instalaci ma pres 300MB, ale da se to orezat. kdyz se pouzije neco jineho nez velka trojka (GNOME,KDE,XFCE) a nepouzije se firefox, tak by to melo jet. mk From ynezz na true.cz Tue Dec 4 16:06:08 2007 From: ynezz na true.cz (Petr Stetiar) Date: Tue, 4 Dec 2007 16:06:08 +0100 Subject: Distribuce pro =?iso-8859-2?B?c3Rhcrnt?= =?iso-8859-2?Q?_po=E8=EDta=E8e_ve_firemn=EDm_prost=F8ed=ED?= In-Reply-To: <47556AEA.8050707@fi.muni.cz> References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> <475567EF.2080308@seznam.cz> <47556AEA.8050707@fi.muni.cz> Message-ID: <20071204150608.GD24585@ibawizard.net> Ludek Bartek [2007-12-04 15:57:46]: > Rozdil bude v tom, ze v Debianu si muzete vybrat mensiho otesanka nez je > GDE/KDE a tim ten system trosku zrychlit. Fluxbuntu by mozna taky mohlo vyhovovat. From mbdrzq8jm1wljrwyo1sk na gmail.com Tue Dec 4 16:13:40 2007 From: mbdrzq8jm1wljrwyo1sk na gmail.com (hondza) Date: Tue, 4 Dec 2007 15:13:40 +0000 (UTC) Subject: TCP wrapper na socks proxy References: <040d01c83684$142bd8e0$6164a8c0@xp> Message-ID: On 2007-12-04, Jaroslav Lukesh wrote: > DObrý den, Zdravim. > existuje nějaký commandlinový wrapper, kterěmu předhodím program co neumí > socks proxy a on pak půjde přes ni? tsocks http://tsocks.sourceforge.net/ dsocks http://monkey.org/~dugsong/dsocks/ dante-client http://www.inet.no/dante/ proxychains http://proxychains.sourceforge.net/ Mam celkem dobre zkusenosti s dante-clientem. Bude fungovat jen pro tcp konekce (socks5 sice umoznuje i udp, ale nejsem si jisty, jestli to nektery z wrapperu resi) a jen u dynamicky linkovanych programu. -- hondza | GPG key: http://www.hondza.adslink.cz/key.asc Fingerprint: 31E7 EF56 7280 5C89 75E9 FF9D 010E 175F 7823 CF38 GPG/PGP encrypted/signed emails are welcome. From cavo+konf na cavo.sk Tue Dec 4 16:14:54 2007 From: cavo+konf na cavo.sk (Marian Cavojsky) Date: Tue, 4 Dec 2007 16:14:54 +0100 Subject: TCP wrapper na socks proxy In-Reply-To: <040d01c83684$142bd8e0$6164a8c0@xp> References: <040d01c83684$142bd8e0$6164a8c0@xp> Message-ID: <20071204151453.GC2871@stone.cavo.sk> On Tue, Dec 04, 2007 at 03:43:45PM +0100, Jaroslav Lukesh wrote: > DObrý den, > > existuje nějaký commandlinový wrapper, kterěmu předhodím program co neumí > socks proxy a on pak půjde přes ni? # emerge -s tsocks * net-proxy/tsocks Latest version available: 1.8_beta5-r2 Homepage: http://tsocks.sourceforge.net/ Description: Transparent SOCKS v4 proxying library License: GPL-2 Je to wrapper, ktory preloaduje kniznice. Pouzivam a som zatial spokojny. -- Marian From dast na panelnet.cz Tue Dec 4 17:06:45 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Tue, 4 Dec 2007 17:06:45 +0100 Subject: Distribuce pro =?iso-8859-2?B?c3Rhcrnt?= =?iso-8859-2?Q?_po=E8=EDta=E8e_ve_firemn=EDm_prost=F8ed=ED?= In-Reply-To: <20071204141033.GA5636@finrod> References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> <20071204141033.GA5636@finrod> Message-ID: <20071204160645.GA3911@panelnet.cz> Ahoj, On Tue, Dec 04, 2007 at 03:10:33PM +0100, Martin Kraus wrote: > On Tue, Dec 04, 2007 at 02:01:57PM +0100, Petr Klíma wrote: > > Mozna bych zkusil Debian. Zakladni instalace bez X nebude mit vic, nez > > 200-250MB, paměťové nároky při nepoužití GNOME a KDE budou taky rozumne... > > no debian pri zakladni instalaci ma pres 300MB, ale da se to orezat. kdyz se > zakladni instalace debianu stable tj. bez pridanych baliku ma zcela jiste pod 150MB. Pouzivam nekde jako image pro zmenu hesla s X+glinks a ma to 173MB. Docela se mi zamlouva zminene fluxubuntu, vypada pekne a netucne http://wiki.fluxbuntu.org/index.php?title=Image:Fluxbuntu-7.10-screenshot5.png -- Dalibor Straka From honza na vrbata.cz Tue Dec 4 17:34:15 2007 From: honza na vrbata.cz (Honza Vrbata) Date: Tue, 4 Dec 2007 17:34:15 +0100 (CET) Subject: samovolny start pocitace po shutdownu Message-ID: <43695.147.32.193.95.1196786055.squirrel@hippo.feld.cvut.cz> hezky vecer, mam tu prave pred sebou desktopovy acerpower pocitac s nejnovejsim ubuntu a mam nasledujici problem. nehce se to zadnym zpusobem vypnout :-) respektive pocitac se vypne, ale po chvili opet startuje. je to uplne stejne, kdyz to shodim (shutdown, poweroff) pokud ho uspim na disk, nebo do pameti. to vse funguje, jenze jak pocitac lehne, za chvili se zase probudi. i acpi udalosti funguji, reaguji na stisk vypinaciho tlacitka, atd. nevite prosim nekdo ???????? dekuji pekne za odpovedi honza vrbata From soban na soban.cz Tue Dec 4 19:43:49 2007 From: soban na soban.cz (=?ISO-8859-2?Q?Petr_=A9ob=E1=F2?=) Date: Tue, 04 Dec 2007 19:43:49 +0100 Subject: samovolny start pocitace po shutdownu In-Reply-To: <43695.147.32.193.95.1196786055.squirrel@hippo.feld.cvut.cz> References: <43695.147.32.193.95.1196786055.squirrel@hippo.feld.cvut.cz> Message-ID: <47559FE5.3050806@soban.cz> Honza Vrbata napsal(a): > hezky vecer, > mam tu prave pred sebou desktopovy acerpower pocitac s nejnovejsim ubuntu a mam nasledujici > problem. nehce se to zadnym zpusobem vypnout :-) respektive pocitac se vypne, ale po chvili opet > startuje. je to uplne stejne, kdyz to shodim (shutdown, poweroff) pokud ho uspim na disk, nebo do > pameti. to vse funguje, jenze jak pocitac lehne, za chvili se zase probudi. i acpi udalosti > funguji, reaguji na stisk vypinaciho tlacitka, atd. nevite prosim nekdo ???????? > > dekuji pekne za odpovedi > > honza vrbata > Odpojte ho od sítě (internet) ať víte že ho na 100% neprobouzí sítovka. Potom skontrolujte položky v biosu co je tam nastavené. -- /----------------------------------------\ | Petr Šobáň | | Olomouc | |----------------------------------------| | ICQ 179223500 | | jabber soban_petr na jabber.org | \----------------------------------------/ From c.fertr na gmail.com Tue Dec 4 23:48:02 2007 From: c.fertr na gmail.com (Ctirad Fertr) Date: Tue, 4 Dec 2007 23:48:02 +0100 Subject: Distribuce pro =?iso-8859-2?q?star=B9=ED_po=E8=EDta=E8e_ve_firemn=EDm?= =?iso-8859-2?q?_prost=F8ed=ED?= In-Reply-To: <47553D69.1060309@seznam.cz> References: <47553D69.1060309@seznam.cz> Message-ID: <200712042348.02335.c.fertr@gmail.com> Dne Tuesday 04 of December 2007 12:43:37 Petr "Qaxi" Klíma napsal(a): > Hledám distro pro starší počítače (Pent. 400Mhz 128MB RAM 800MB HDD) > > mám základní požadavky: > > - PAM s ldap (pro integraci do firemní sítě) > - NFS (mountnutí /home) (lze i SMB, ale ...) > - XWindows (nutné pro browser na webové aplikace) > - Firefox (nebo jiný lehčí Gecko prohlížeč) > (budu zkoušet i něco postaveného na WebKitu) > - ThunderBird nebo Sylpheed > - AbiWord a gnumeric postačují ... > - Lokalizace do CZ Distro není problém. Zvolil bych Debian (možná i Ubuntu) nebo třeba Arch. Ale s těmi firefoxy a thuderbirdy bych byl opatrný. Z vlastní zkušenosti s pomalými stroji doporučuji KDE, Konqueror, Kmail a další programy z toho desktopu. Používání minimalistických WM nikam nevede, protože vás to automaticky nutí používat ty nejnenažranější aplikace typu firefox nebo OOo. Ty druhé jmenované jsou bohužel problém. Ani koffice, ani abiword/gnumeric bohužel nejsou rovnocenná náhrada a tak je potřeba se s nimi smířit a neumřít sešlostí věkem během jejich natahování. Ctirad From michal.rybarik na ecce.sk Wed Dec 5 00:03:51 2007 From: michal.rybarik na ecce.sk (=?ISO-8859-2?Q?Michal_Ryb=E1rik?=) Date: Wed, 05 Dec 2007 00:03:51 +0100 Subject: Distribuce pro =?ISO-8859-2?Q?star=B9=ED_po=E8=EDta=E8e_?= =?ISO-8859-2?Q?ve_firemn=EDm_prost=F8ed=ED?= In-Reply-To: <47553D69.1060309@seznam.cz> References: <47553D69.1060309@seznam.cz> Message-ID: <4755DCD7.9070304@ecce.sk> > Hledám distro pro starší počítače (Pent. 400Mhz 128MB RAM 800MB HDD) > My bezime na strojoch podobnej konfiguracie (male desktopy Compaq SFF) celu firmu uz skoro 4 roky, a to s plnym komfortom, ziadne osekavanie balikov alebo stare distribucie, ale plny vykon modernej masiny na tomto starom zeleze.... Staci jeden silnejsi stroj ktory bude terminalovy server, u nas je to 2.8 GHz, 2GB RAM, bezi na nom aktualne Kubuntu... a tie stare stroje sluzia ako terminalovi klienti, cez XDMCP. Na beznej LANke s 10 klientskymi strojmi absolutne nepoznat zatazenie, ide to uuuplne uspokojivo. Paci sa mi na tom ze staci aktualizovat a drzat v dobrej kondicii iba ten jeden server, pretoze vsetci klienti vlastne robia na nom... Na nakladoch na licencie, hardware aj administraciu sme oproti Windows usetrili niekolko stotisic a ide to porovnatelne (aj Linux aj Windows maju svoje plus aj minus).. M.R. From tomasek na etf.cuni.cz Wed Dec 5 07:19:26 2007 From: tomasek na etf.cuni.cz (Petr Tomasek) Date: Wed, 5 Dec 2007 07:19:26 +0100 Subject: podpora pro RTC/i2c? Message-ID: <20071205061926.GA29688@ebed.etf.cuni.cz> Zdravim! Nemuzu se nejak dohledat: ma linux nejakou slusnou podporu pro RTC pres I2C/smbus? Konkretne napr. PCF8573? (Nejlepe tak, aby bylo mozne nejak automaticky synchronizovat systemovy cas -> RTC)... Diky! P.T. -- Petr Tomasek Jabber: butrus na jabbim.cz SIP: butrus na ekiga.net From qaxi na seznam.cz Wed Dec 5 07:46:59 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Wed, 05 Dec 2007 07:46:59 +0100 Subject: Distribuce pro =?UTF-8?B?c3RhcsWhw60gcG/EjcOtdGHEjWUgdmUgZmly?= =?UTF-8?B?ZW1uw61tIHByb3N0xZllZMOt?= In-Reply-To: <4755DCD7.9070304@ecce.sk> References: <47553D69.1060309@seznam.cz> <4755DCD7.9070304@ecce.sk> Message-ID: <47564963.2090409@seznam.cz> > My bezime na strojoch podobnej konfiguracie (male desktopy Compaq SFF) > celu firmu uz skoro 4 roky, a to s plnym komfortom, ziadne osekavanie > balikov alebo stare distribucie, ale plny vykon modernej masiny na tomto > starom zeleze.... Staci jeden silnejsi stroj ktory bude terminalovy > server, u nas je to 2.8 GHz, 2GB RAM, bezi na nom aktualne Kubuntu... a > tie stare stroje sluzia ako terminalovi klienti, cez XDMCP. Na beznej > Hm ... těch pecek bude 80 po celé republice ... Navíc jejich hlavní provoz bude ssh terminál do ERP, občas tisk na "lokální" síťovou tiskárnu, příjem mailu a používání web aplikací. Nechce se mi upgradovat linky do všech poboček, to stojí peníze. Terminal server jsme zvazovali, ale radsi půjdeme lokální stanice . > LANke s 10 klientskymi strojmi absolutne nepoznat zatazenie, ide to > uuuplne uspokojivo. Paci sa mi na tom ze staci aktualizovat a drzat v > dobrej kondicii iba ten jeden server, pretoze vsetci klienti vlastne > robia na nom... Na nakladoch na licencie, hardware aj administraciu sme > oproti Windows usetrili niekolko stotisic a ide to porovnatelne (aj > Linux aj Windows maju svoje plus aj minus).. > no ja ... ty lidi doteď dělali na znakovém terminálu (mistr u výrobní linky toho moc nepotřebuje) ... pro ně to bude "komfort" a navíc budou moct na intranet ... -- Petr Klíma e-mail: qaxi na seznam.cz From luf na pzkagis.cz Wed Dec 5 07:56:54 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Wed, 5 Dec 2007 07:56:54 +0100 Subject: Distribuce pro =?iso-8859-2?B?c3Rhcrnt?= =?iso-8859-2?Q?_po=E8=EDta=E8e_ve_firemn=EDm_prost=F8ed=ED?= In-Reply-To: <47564963.2090409@seznam.cz> References: <47553D69.1060309@seznam.cz> <4755DCD7.9070304@ecce.sk> <47564963.2090409@seznam.cz> Message-ID: <20071205065654.GA28075@pzkagis.cz> Wed, Dec 05, 2007 at 07:46:59AM +0100, "Petr \"Qaxi\" Klíma" napsal(a): > Navíc jejich hlavní provoz bude ssh terminál do ERP, občas tisk na > "lokální" síťovou tiskárnu, příjem mailu a používání web aplikací. Proc tedy mail neresit web aplikaci? Odpadne potreba thunderbirda ci neceho podobneho. Popripade co takovy mutt, pine, ...? ... > no ja ... ty lidi doteď dělali na znakovém terminálu (mistr u výrobní > linky toho moc nepotřebuje) ... > pro ně to bude "komfort" a navíc budou moct na intranet ... Navic zalezi na intranetich aplikacich, ale links je taky sikula a pak uz je jen otazka, zda je potreba Xy ;o) Ale tady predpokladam, ze toto jste jiz zvazovali. Luf From lukesh na seznam.cz Wed Dec 5 08:00:18 2007 From: lukesh na seznam.cz (Jaroslav Lukesh) Date: Wed, 5 Dec 2007 08:00:18 +0100 Subject: Distribuce pro starší počítače ve firemním prostředí References: <47553D69.1060309@seznam.cz> <4755DCD7.9070304@ecce.sk> <47564963.2090409@seznam.cz> Message-ID: <059601c8370c$812b6860$6164a8c0@xp> Na to se nám osvědčilo putty (ano, v linuxovém tenkém klientovi). Má mnohé přednosti oproti holému ssh. Mrkněte na projekty tenkého klienta, je jich celkem dost a některé jsou velmi přizpůsobivé (třeba thinstation, bývalý netstation). A běhají na skutečně hodně starých plečkách. Stačí jen TFTP a DHCP server (i jeden z tenkých klientů takto může fungovat, jen je oproti ostatním s flashdiskem). Má to i vzdálenou správu, což se vám bude hodit. ----- Original Message ----- From: ""Petr \"Qaxi\" Klíma"" > My bezime na strojoch podobnej konfiguracie (male desktopy Compaq SFF) > celu firmu uz skoro 4 roky, a to s plnym komfortom, ziadne osekavanie > balikov alebo stare distribucie, ale plny vykon modernej masiny na tomto > starom zeleze.... Staci jeden silnejsi stroj ktory bude terminalovy > server, u nas je to 2.8 GHz, 2GB RAM, bezi na nom aktualne Kubuntu... a > tie stare stroje sluzia ako terminalovi klienti, cez XDMCP. Na beznej > Hm ... těch pecek bude 80 po celé republice ... Navíc jejich hlavní provoz bude ssh terminál do ERP, občas tisk na "lokální" síťovou tiskárnu, příjem mailu a používání web aplikací. From katerina.bubenickova na plbohnice.cz Wed Dec 5 09:12:12 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Wed, 05 Dec 2007 09:12:12 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <6rat15xk7k.ln2@hubmaier.ceplovi.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> Message-ID: <47565D5C.8010700@plbohnice.cz> Stahla jsem si konecne ty spravne zdorjove kody, ale stejne se mi nepodarilo vyresit vsechny zavislosti, takze beeblebrox:~/a/suse/i586 # beeblebrox:/usr/src/packages/SPECS # rpmbuild -dd php5-with-interbase.spec error: Failed build dependencies: flex-old is needed by php5-5.1.2-29.5.i586 libtidy-devel is needed by php5-5.1.2-29.5.i586 orbit-devel is needed by php5-5.1.2-29.5.i586 qt3-devel is needed by php5-5.1.2-29.5.i586 libtidy-devel neni v distribuci, ale stahla jsem na rpmfind a nainstalovala bez problemu. flex-old neni v distribuci ani na rpmfind qt3-devel je v distribuci Installing ""'/root/a/suse/i586/qt3-devel-3.3.5-58.7.i586.rpm'"" error: Failed dependencies: xorg-x11-Mesa-devel is needed by qt3-devel-3.3.5-58.7.i586 ale xorg-x11-Mesa-devel v distribuci neni a kdyz stahnu z rpmfind verzi pro suse 10.2, tak tam jsou kolize Zkousela jsem i nainstalovat rpm -i --nodeps qt3 a potom jsem oeditovala php5.spec: BuildRequires: flex-old jsem zmenila na flex, orbit-devel jsem zmenila na orbit2-devel, a samozrejme to nefungovalo - rpmbuild nic neudelal ani nenahlasil. Situace se zdrojaky z http://rpm.pbone.net/ je podobna, stejne nevyresene zavislosti. Jeste me napadlo stahnout chybejici balicky z rpm.bone.net, kde jsem opravdu nasla flex-old a orbit a orbit-devel pro OpenSuse, takze zbyva uz jen qt3- z distribuce, ktere potrebuje xorg-x11-Mesa-devel, a to koliduje s balickem Mesa a Mesa-devel z distribuce. beeblebrox:~/a/suse/i586 # rpm -e Mesa-6.4.2-19.4.i586 error: Failed dependencies: libGL.so.1 is needed by (installed) glitz-0.4.4-21.2.i586 beeblebrox:/usr/src/packages/SPECS # beeblebrox:~/a/suse/i586 # rpm -e glitz-0.4.4-21.2.i586 error: Failed dependencies: libglitz.so.1 is needed by (installed) cairo-1.0.2-27.4.i586 libglitz.so.1 is needed by (installed) pango-1.10.2-23.2.i586 libglitz.so.1 is needed by (installed) gtk2-2.8.10-39.12.i586 libglitz.so.1 is needed by (installed) libglade2-2.5.1-24.2.i586 libglitz.so.1 is needed by (installed) vte-0.11.16-19.2.i586 libglitz.so.1 is needed by (installed) libgcj-4.1.0-28.4.i586 libglitz.so.1 is needed by (installed) libsvg-cairo-0.1.6-16.2.i586 libglitz.so.1 is needed by (installed) python-cairo-1.0.2-14.2.i586 libglitz.so.1 is needed by (installed) python-gtk-2.8.2-21.2.i586 libglitz.so.1 is needed by (installed) ethereal-0.10.14-16.2.i586 Tak ted uz zase nevim, jestli si to muzu dovolit vsechno odinstalovat, aby mi nespadl server. Kazdopadne vidim, ze php ve SLES 10 neni prelozitelne pouze se zdrojaky ze SLES 10 :-( Kazde dalsi povzbuzeni je vitano. Diky --Katerina From jikos na jikos.cz Wed Dec 5 09:35:39 2007 From: jikos na jikos.cz (Jiri Kosina) Date: Wed, 5 Dec 2007 09:35:39 +0100 (CET) Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47565D5C.8010700@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> Message-ID: On Wed, 5 Dec 2007, Katerina Bubenickova wrote: > libtidy-devel neni v distribuci, Ja tu tedy v SDK pro SLES10-SP1 vidim: libtidy-devel-050517-16.2.x86_64.rpm > qt3-devel je v distribuci > Installing ""'/root/a/suse/i586/qt3-devel-3.3.5-58.7.i586.rpm'"" > error: Failed dependencies: > xorg-x11-Mesa-devel is needed by qt3-devel-3.3.5-58.7.i586 > ale xorg-x11-Mesa-devel v distribuci neni a kdyz stahnu z rpmfind verzi > pro suse 10.2, tak tam jsou kolize Verze pro 10.2 v SLES10 skutecne pouzit dozajista nepujde. Nicmene xorg-x11-Mesa-devel je providovan balickem Mesa-devel-6.4.2-19.12.i586.rpm Vy nemate yast? Kdyz budete instalovat jeho package managerem, tak on za Vas samozrejme vsechny zavislosti vyresi. > a samozrejme to nefungovalo - rpmbuild nic neudelal ani nenahlasil. A s jakymi parametry jste ho spoustela? > Jeste me napadlo stahnout chybejici balicky z rpm.bone.net, kde jsem > opravdu nasla flex-old a orbit a orbit-devel pro OpenSuse, Michat do SLESu balicky z opensuse opravdu neni dobry napad. Installer v yastu vyresi zavislosti za vas, proc ho nepouzijete? > Kazdopadne vidim, ze php ve SLES 10 neni prelozitelne pouze se zdrojaky > ze SLES 10 :-( To neni pravda. -- Jiri Kosina From qaxi na seznam.cz Wed Dec 5 09:37:15 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Wed, 05 Dec 2007 09:37:15 +0100 Subject: Distribuce pro =?UTF-8?B?77+9?= In-Reply-To: <059601c8370c$812b6860$6164a8c0@xp> References: <47553D69.1060309@seznam.cz> <4755DCD7.9070304@ecce.sk> <47564963.2090409@seznam.cz> <059601c8370c$812b6860$6164a8c0@xp> Message-ID: <4756633B.2070804@seznam.cz> Jaroslav Lukesh napsal(a): > Na to se nám osvědčilo putty (ano, v linuxovém tenkém klientovi). Má mnohé > přednosti oproti holému ssh. Ano Putty máme vlastního upraveného (kolega pridal podporu lokalizace a lokální lpd server ...) > Mrkněte na projekty tenkého klienta, je jich > celkem dost a některé jsou velmi přizpůsobivé (třeba thinstation, bývalý > netstation). A běhají na skutečně hodně starých plečkách. Stačí jen TFTP a > DHCP server (i jeden z tenkých klientů takto může fungovat, jen je oproti > ostatním s flashdiskem). > Ne, terminálový provoz není volba ... > Má to i vzdálenou správu, což se vám bude hodit. > -- Petr Klíma e-mail: qaxi na seznam.cz From luf na pzkagis.cz Wed Dec 5 09:39:42 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Wed, 5 Dec 2007 09:39:42 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47565D5C.8010700@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> Message-ID: <20071205083942.GB28075@pzkagis.cz> Wed, Dec 05, 2007 at 09:12:12AM +0100, Katerina Bubenickova napsal(a): > Stahla jsem si konecne ty spravne zdorjove kody, ale stejne se mi > nepodarilo vyresit vsechny zavislosti, takze > > beeblebrox:~/a/suse/i586 # beeblebrox:/usr/src/packages/SPECS # rpmbuild > -dd php5-with-interbase.spec > error: Failed build dependencies: > flex-old is needed by php5-5.1.2-29.5.i586 > libtidy-devel is needed by php5-5.1.2-29.5.i586 > orbit-devel is needed by php5-5.1.2-29.5.i586 > qt3-devel is needed by php5-5.1.2-29.5.i586 Do SUSE moc nevidim, ale parkrat jsem provedl to, ze kdyz jsem si prekladal RPM a nepotreboval jsem nektere casti, tak jsem prislusne zavislosti ve .spec souboru zkratka smazal a ono to proslo ;o) Nepomohlo by to i vam? Luf From petr.klima na sobriety.cz Wed Dec 5 09:45:04 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Wed, 05 Dec 2007 09:45:04 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47565D5C.8010700@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> Message-ID: <47566510.6020305@sobriety.cz> Katerina Bubenickova wrote: > qt3-devel je v distribuci > Installing ""'/root/a/suse/i586/qt3-devel-3.3.5-58.7.i586.rpm'"" > error: Failed dependencies: > xorg-x11-Mesa-devel is needed by qt3-devel-3.3.5-58.7.i586 Nechapu, k cemu by pri kompilaci php bylo qt. Mozna bych zkusil tu zavislost umazat a pripadne se podivat na parametry configure, jestli tam neni neco, co by qt vyzadovalo a pripadne to taky umaznout. > Zkousela jsem i nainstalovat rpm -i --nodeps qt3 a potom jsem oeditovala > php5.spec: > BuildRequires: flex-old jsem zmenila na flex, orbit-devel jsem zmenila > na orbit2-devel, > a samozrejme to nefungovalo - rpmbuild nic neudelal ani nenahlasil. To uz je zajimave, aspon neco zahulakat by mel. Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From katerina.bubenickova na plbohnice.cz Wed Dec 5 09:51:00 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Wed, 05 Dec 2007 09:51:00 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> Message-ID: <47566674.4070801@plbohnice.cz> Jiri Kosina napsal(a): > On Wed, 5 Dec 2007, Katerina Bubenickova wrote: > > >> libtidy-devel neni v distribuci, >> > > Ja tu tedy v SDK pro SLES10-SP1 vidim: > > libtidy-devel-050517-16.2.x86_64.rpm > SDK jsem nezkousela, vyzkousim > >> qt3-devel je v distribuci >> Installing ""'/root/a/suse/i586/qt3-devel-3.3.5-58.7.i586.rpm'"" >> error: Failed dependencies: >> xorg-x11-Mesa-devel is needed by qt3-devel-3.3.5-58.7.i586 >> ale xorg-x11-Mesa-devel v distribuci neni a kdyz stahnu z rpmfind verzi >> pro suse 10.2, tak tam jsou kolize >> > > Verze pro 10.2 v SLES10 skutecne pouzit dozajista nepujde. Nicmene > xorg-x11-Mesa-devel je providovan balickem Mesa-devel-6.4.2-19.12.i586.rpm > Mela jsem pocit, ze pri spusteni rpmbuild -dd php5.spec nepozna, kdyz je nainstalovano Mesa-devel, a chce xorg-x11-Mesa-devel, ale uz si nejsem 100% jista, vyzkousela jsem toho tolik a tolikrat, ze jsem se mohla splest. > Vy nemate yast? Kdyz budete instalovat jeho package managerem, tak on za > Vas samozrejme vsechny zavislosti vyresi. > Yast mam, a do nedavna jsem ho pouzivala, vzdycky jsem se snazila peclive zatrhavat "instalovat prislusne devel balicky". A potom jsem koukala, ze zavislosti u php chteji devel balicek, ktery z yastu nemuzu nainstalovat, a ve zdrojacich je. Takze jsem ted pri instalaci php na yast zanevrela. Mozna jsem to delala nejak spatne? > >> a samozrejme to nefungovalo - rpmbuild nic neudelal ani nenahlasil. >> > > A s jakymi parametry jste ho spoustela? > rpmbuild -dd *.spec > >> Jeste me napadlo stahnout chybejici balicky z rpm.bone.net, kde jsem >> opravdu nasla flex-old a orbit a orbit-devel pro OpenSuse, >> > > Michat do SLESu balicky z opensuse opravdu neni dobry napad. Installer v > yastu vyresi zavislosti za vas, proc ho nepouzijete? > viz vyse. > >> Kazdopadne vidim, ze php ve SLES 10 neni prelozitelne pouze se zdrojaky >> ze SLES 10 :-( >> > > To neni pravda. > To jsem rada, zacnu znovu a spravne --Katerina From katerina.bubenickova na plbohnice.cz Wed Dec 5 10:16:28 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Wed, 05 Dec 2007 10:16:28 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47566674.4070801@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> Message-ID: <47566C6C.7050505@plbohnice.cz> > Yast mam, a do nedavna jsem ho pouzivala, vzdycky jsem se snazila > peclive zatrhavat > "instalovat prislusne devel balicky". A potom jsem koukala, ze > zavislosti u php chteji > devel balicek, ktery z yastu nemuzu nainstalovat, a ve zdrojacich je. > Takze jsem ted pri instalaci php na yast zanevrela. Mozna jsem to delala > nejak spatne? > Omlouvam se Suse za stiznosti na yast, uvedomila jsem si, ze jsem si asi popletla servery, na kterych jsem instalovala devel balicky, takze mozna prece jen yast instaluje spravne. --Katerina From petr.klima na sobriety.cz Wed Dec 5 10:23:05 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Wed, 05 Dec 2007 10:23:05 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47566C6C.7050505@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <47566C6C.7050505@plbohnice.cz> Message-ID: <47566DF9.3060900@sobriety.cz> Katerina Bubenickova wrote: > Omlouvam se Suse za stiznosti na yast, uvedomila jsem si, ze jsem si asi > popletla servery, > na kterych jsem instalovala devel balicky, takze mozna prece jen yast > instaluje spravne. Popleteni serveru je oblibeny administratorsky trik, ja jsem si je uz spletl i pri rebootu :-) Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From katerina.bubenickova na plbohnice.cz Wed Dec 5 13:08:10 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Wed, 05 Dec 2007 13:08:10 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47566674.4070801@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> Message-ID: <475694AA.5030808@plbohnice.cz> >> xorg-x11-Mesa-devel je providovan balickem Mesa-devel-6.4.2-19.12.i586.rpm >> >> Koukam, ze delam jednu blbost za druhou, beeblebrox:~/a/suse/i586 # rpm -i Mesa-6.4.2-19.4.i586.rpm Mesa-devel-6.4.2-19.4.i586.rpm balíček Mesa-6.4.2-19.4 je již nainstalován Myslela jsem, ze to mesa-devel nainstaluje, ale rpm skonci hlaskou a nic neudela. Takze jsem Mesa-devel opravdu nainstalovane nemela. Opravdu to staci a uz xorg-x11-Mesa-devel neni potreba. rpmbuild jsem spoustela se spatnym parametrem: trapne jsem se spletla a misto -bb jsem psala -dd. Stahla jsem si SLE-10-SDK-i386-GMC 4 CD, nasla jsem tam orbit, orbit-devel, ale ne flex-old. libtidy-050517-16.2.i586.rpm tam byla (cd 2), ale ne libtidy-devel. Misto flex-old a libtidy jsem pouzila to, co jsem mela stazene z OpenSuse 10.2 rpmbuild jsem predtim spoustela se spatnym parametrem: trapne jsem se spletla a misto -bb jsem psala -dd. rpmbuild -bb php5-with-interbase.spec ... checking for IMAP SSL support... no checking for Informix support... no checking for InterBase support... yes checking for isc_detach_database in -lfbclient... no checking for isc_detach_database in -lgds... no checking for isc_detach_database in -lib_util... no configure: error: libgds, libib_util or libfbclient not found! Check config.log for more information. error: Špatný návratový kód z /var/tmp/rpm-tmp.47630 (%build) Co mam doinstalovat? Neni to neco k firebirdu? Diky --Katerina From petr.klima na sobriety.cz Wed Dec 5 13:22:58 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Wed, 05 Dec 2007 13:22:58 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <475694AA.5030808@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> Message-ID: <47569822.8050208@sobriety.cz> Katerina Bubenickova wrote: > rpmbuild -bb php5-with-interbase.spec > ... > checking for IMAP SSL support... no > checking for Informix support... no > checking for InterBase support... yes > checking for isc_detach_database in -lfbclient... no > checking for isc_detach_database in -lgds... no > checking for isc_detach_database in -lib_util... no > configure: error: libgds, libib_util or libfbclient not found! Check > config.log for more information. > error: Špatný návratový kód z /var/tmp/rpm-tmp.47630 (%build) > > Co mam doinstalovat? Neni to neco k firebirdu? poslechnete ten error a podivejte se do config.log ve zdrojich. Jako silne neznaly soudim, ze "libfbclient" je klientska knihovna k Firebirdu, jejiz devel nemate.... Takze jeste devel baliky k Firebirdu Jo, jeste k tomu hromadeni chyb - obcas pomaha poradne se vyspat, pripadne predem lehce opit :-) Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From katerina.bubenickova na plbohnice.cz Wed Dec 5 15:04:19 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Wed, 05 Dec 2007 15:04:19 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <47569822.8050208@sobriety.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> Message-ID: <4756AFE3.2020908@plbohnice.cz> Petr Klíma napsal(a): > Katerina Bubenickova wrote: > >> rpmbuild -bb php5-with-interbase.spec >> ... >> checking for IMAP SSL support... no >> checking for Informix support... no >> checking for InterBase support... yes >> checking for isc_detach_database in -lfbclient... no >> checking for isc_detach_database in -lgds... no >> checking for isc_detach_database in -lib_util... no >> configure: error: libgds, libib_util or libfbclient not found! Check >> config.log for more information. >> error: Špatný návratový kód z /var/tmp/rpm-tmp.47630 (%build) >> >> Co mam doinstalovat? Neni to neco k firebirdu? >> Google mi rekl, ze to je znamy bug pri prekladu, reseni jsem jeste nenasla. > Jo, jeste k tomu hromadeni chyb - obcas pomaha poradne se vyspat, > pripadne predem lehce opit :-) > > Asi to pujdu udelat a pokracovat zitra, diky za radu ;-) --Katerina From petr.klima na sobriety.cz Wed Dec 5 15:12:31 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Wed, 05 Dec 2007 15:12:31 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4756AFE3.2020908@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> Message-ID: <4756B1CF.9060500@sobriety.cz> Katerina Bubenickova wrote: > Petr Klíma napsal(a): >> Katerina Bubenickova wrote: >> >>> rpmbuild -bb php5-with-interbase.spec >>> ... >>> checking for IMAP SSL support... no >>> checking for Informix support... no >>> checking for InterBase support... yes >>> checking for isc_detach_database in -lfbclient... no >>> checking for isc_detach_database in -lgds... no >>> checking for isc_detach_database in -lib_util... no >>> configure: error: libgds, libib_util or libfbclient not found! Check >>> config.log for more information. >>> error: Špatný návratový kód z /var/tmp/rpm-tmp.47630 (%build) >>> >>> Co mam doinstalovat? Neni to neco k firebirdu? >>> > Google mi rekl, ze to je znamy bug pri prekladu, reseni jsem jeste nenasla. Je tu jedno, abych tak rekl, veprove reseni: Pokud VITE, ze mate vse potrebne, muzete ten test v configure zmenit tak, aby vzdy skoncil uspechem. Typicky se jedna o nalezeni nejake if podminky, pripadne v nekterych pripadech se da parametrem vysvetlit configure, ze tu danou vec MATE, i kdyz si mysli, ze nemate... Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From spatkak na luzanky.cz Wed Dec 5 15:49:03 2007 From: spatkak na luzanky.cz (=?ISO-8859-2?Q?Petr_=A9patka?=) Date: Wed, 05 Dec 2007 15:49:03 +0100 Subject: Samba v Centos5 po updatu =?ISO-8859-2?Q?pad=E1?= Message-ID: <4756BA5F.1090500@luzanky.cz> Dobrý den, používám Centos 5. Po updatu samby na verzi samba-*-3.0.25b-1.el5_1.2 se smb síť začala chovat divně - někteří se nepřihlásili do domény, někteří se dlouho nedostali k souborům (vypadalo to spíš na problém s resolvingem a wins než na problém se přenosem souborů). Bádal bych víc kde je problém, ale v logu se objevilo například: [2007/12/05 14:33:34, 0] lib/fault.c:dump_core(181) dumping core in /var/log/samba/cores/smbd sh: /root/samba/smblogin01: není souborem ani adresářem [2007/12/05 14:33:37, 1] smbd/service.c:make_connection_snum(1033) 192.168.1.107 (192.168.1.107) connect to service eo initially as user eo (uid=523, gid=523) (pid 5701) [2007/12/05 14:34:03, 0] lib/util.c:smb_panic(1654) PANIC (pid 5701): push_ascii - dest_len == -1 [2007/12/05 14:34:03, 0] lib/util.c:log_stack_trace(1758) BACKTRACE: 14 stack frames: #0 smbd(log_stack_trace+0x2d) [0xc4ba2d] #1 smbd(smb_panic+0x5d) [0xc4bb5d] #2 smbd(push_ascii+0xf7) [0xc34287] #3 smbd(push_string_fn+0x4c) [0xc342dc] #4 smbd(srvstr_push_fn+0x54) [0xabe0f4] #5 smbd [0xaa3fb3] #6 smbd [0xaa6985] #7 smbd(handle_trans2+0x237) [0xaaa787] #8 smbd(reply_trans2+0x6bb) [0xab0f3b] #9 smbd [0xacd500] #10 smbd(smbd_process+0x836) [0xace596] #11 smbd(main+0xbdd) [0xd2880d] #12 /lib/libc.so.6(__libc_start_main+0xdc) [0x225dec] #13 smbd [0xa521d1] To se mi jeví jako zbytečné snažit se opravit něco takového - to asi nebude stačit něco změnit v nastavení. Po návratu k původní 3.0.23* je vše zase OK. Jsem jedinej kdo má problém, nebo je nás víc? Google zatím mlčí nebo jsem dal blbou část logu. Díky za jakékoliv info Petr From cramers na seznam.cz Wed Dec 5 15:53:56 2007 From: cramers na seznam.cz (Cramer) Date: Wed, 05 Dec 2007 15:53:56 +0100 Subject: Raid - migrace za behu systemu Message-ID: <4756BB84.5070305@seznam.cz> Zdravim, poradite mi nekdo s nasledujici situaci? Mam v pc (mimo jine) 3 x 20 gb hdd. Na jednom je / na druhem /home a na tretim zatim nic. Potrebuji tyto disky spojit do RAID 3 {nebo obdobu} pole, kdyby nahodou nejaky vypadl, aby to neohrozilo beh systemu. Problem je, jak to udelat? Je mozne zmigrovat na raid za behu systemu bez nutnosti udelat to cestou: - zazalohovat data - vytvorit nove raid pole - nahrad data - nahodit system Diky za typy.. cRam From cramers na seznam.cz Wed Dec 5 15:56:49 2007 From: cramers na seznam.cz (Cramer) Date: Wed, 05 Dec 2007 15:56:49 +0100 Subject: samovolny start pocitace po shutdownu In-Reply-To: <43695.147.32.193.95.1196786055.squirrel@hippo.feld.cvut.cz> References: <43695.147.32.193.95.1196786055.squirrel@hippo.feld.cvut.cz> Message-ID: <4756BC31.5080002@seznam.cz> Honza Vrbata napsal(a): > hezky vecer, > mam tu prave pred sebou desktopovy acerpower pocitac s nejnovejsim ubuntu a mam nasledujici > problem. nehce se to zadnym zpusobem vypnout :-) respektive pocitac se vypne, ale po chvili opet > startuje. je to uplne stejne, kdyz to shodim (shutdown, poweroff) pokud ho uspim na disk, nebo do > pameti. to vse funguje, jenze jak pocitac lehne, za chvili se zase probudi. i acpi udalosti > funguji, reaguji na stisk vypinaciho tlacitka, atd. nevite prosim nekdo ???????? > > dekuji pekne za odpovedi > > honza vrbata > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > Zdravim.. podivej se do biosu na power settings. Hledej polozku podobnou nazvu "After power loss" a podivej se, jestli nahodou neni nastavena na hodnotu "Instant on". Je to nastaveni, ktere se pouziva u serveru, kde je to vyhodne, pokud nahodou vypadne proud a clovek u nej neni, nicmene na pracovni stanici neprilis vhodne. peace cRam From luf na pzkagis.cz Wed Dec 5 16:14:25 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Wed, 5 Dec 2007 16:14:25 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <4756BB84.5070305@seznam.cz> References: <4756BB84.5070305@seznam.cz> Message-ID: <20071205151425.GD30734@pzkagis.cz> > Potrebuji tyto disky spojit do RAID 3 {nebo obdobu} pole, kdyby nahodou Asi jsem dost neznalek, co to je raid 3? Ja znam 0,1,4,5,6, 10 (1+0), ale 3 ne. Jak si predstavujete vysledek? Luf From dast na panelnet.cz Wed Dec 5 16:25:02 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Wed, 5 Dec 2007 16:25:02 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <20071205151425.GD30734@pzkagis.cz> References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734@pzkagis.cz> Message-ID: <20071205152502.GA19512@panelnet.cz> On Wed, Dec 05, 2007 at 04:14:25PM +0100, Ludek Finstrle wrote: > > Potrebuji tyto disky spojit do RAID 3 {nebo obdobu} pole, kdyby nahodou > > Asi jsem dost neznalek, co to je raid 3? Ja znam 0,1,4,5,6, 10 (1+0), ale > 3 ne. > Zkousel jste Google? Na tri disky dejte klidne raid 5, ale zprovoznovat se bude sloziteji pokud nechcete data odzalohovat a nahrat na ciste pole. Uplne nejjednodussi by bylo pouzit dokoupit ctvrty disk a pouzit sw raid 5. U raid3 byva problem s rychlosti, protoze paritni disk zdrzuje. Jinak redundanci poskytuje pri vypadku libovolneho disku. Temer se nepouziva. -- Dalibor Straka From luf na pzkagis.cz Wed Dec 5 16:24:23 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Wed, 5 Dec 2007 16:24:23 +0100 Subject: Samba v Centos5 po =?iso-8859-1?Q?upda?= =?iso-8859-1?Q?tu_pad=E1?= In-Reply-To: <4756BA5F.1090500@luzanky.cz> References: <4756BA5F.1090500@luzanky.cz> Message-ID: <20071205152423.GE30734@pzkagis.cz> Wed, Dec 05, 2007 at 03:49:03PM +0100, Petr Špatka napsal(a): > používám Centos 5. Po updatu samby na verzi samba-*-3.0.25b-1.el5_1.2 S touto verzi ze zdrojaku jsem nemel problem. Sambu si drzim ze zdrojaku, ne z RPM :o( (a koukam, ze se mi to jednou vyplatilo). > se smb síť začala chovat divně - někteří se nepřihlásili do domény, > někteří se dlouho nedostali k souborům (vypadalo to spíš na problém s > resolvingem a wins než na problém se přenosem souborů). Bádal bych víc > kde je problém, ale v logu se objevilo například: > > [2007/12/05 14:33:34, 0] > lib/fault.c:dump_core(181) ... > To se mi jeví jako zbytečné snažit se opravit něco takového - to asi > nebude stačit něco změnit v nastavení. Po návratu k původní 3.0.23* je > vše zase OK. Jsem jedinej kdo má problém, nebo je nás víc? Google zatím > mlčí nebo jsem dal blbou část logu. Co na to rika bug tracker RH ci CentOSu? Neni to lepsi dat tam, nez sem? Ja vim, ze je to tu cesky, ale tam se to da vyresit ... Ne ze bych vas chtel vyhazovat, spise jen pripravit na to, ze to tu nemusite vyresit. Obavam se, ze je to prilis specificke Luf P.S. mam pocit, ze jsem neco podobneho dnes nebo vcera videl v ml samby, ale ruku do ohne za to nedam. From PaJaSoft na fonet.cz Wed Dec 5 15:17:42 2007 From: PaJaSoft na fonet.cz (=?iso-8859-2?Q?Ing._Pavel_PaJaSoft_Janou=B9ek?=) Date: Wed, 5 Dec 2007 15:17:42 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4756B1CF.9060500@sobriety.cz> Message-ID: <200712051417.lB5EHHK2025000@merlin.fonet.cz> linux-bounces+pajasoft=fonet.cz na linux.cz <> wrote: > nekterych pripadech se da parametrem vysvetlit configure, ze tu danou > vec MATE, i kdyz si mysli, ze nemate... A toto se obecně pro autoconf/automake provádí jak, smím-li se zeptat? Občas musím různé vygenerované skripty taktéž různě háčkovat, protože ty výsledky jsou takové všelijaké... ------------------------------------------------------------------- Ing. Pavel Janousek (PaJaSoft) FoNet, spol. s r. o. Technicka podpora, Intranet/Internet Za Kovárnou 1, 625 00 Brno E-mail: mailto:Janousek na FoNet.Cz Tel.: +420 5 4324 4749 WWW: http://WWW.FoNet.Cz/ E-mail: mailto:Info na FoNet.Cz ------------------------------------------------------------------- From spatkak na luzanky.cz Wed Dec 5 18:18:59 2007 From: spatkak na luzanky.cz (=?ISO-8859-2?Q?Petr_=A9patka?=) Date: Wed, 05 Dec 2007 18:18:59 +0100 Subject: Samba v Centos5 po updatu =?ISO-8859-2?Q?pad=E1?= In-Reply-To: <20071205152423.GE30734@pzkagis.cz> References: <4756BA5F.1090500@luzanky.cz> <20071205152423.GE30734@pzkagis.cz> Message-ID: <4756DD83.5020406@luzanky.cz> > Ja vim, ze je to tu cesky, ale tam se to da vyresit ... > To rozhodně prozkoumám a případně se budu snažit to nahlásit. Ale prvně jsem si chtěl ověřit, jestli nás takových není víc a jestli problém není někde mezi mojí klávesnicí a židlí. A přijde mi, že CentOS, RHEL, SL, ... se sambou by tady pár lidí mohlo mít :-). Zdá se, že by to mohlo souviset s https://bugzilla.redhat.com/show_bug.cgi?id=407081a https://bugzilla.redhat.com/show_bug.cgi?id=407091 . Každopádně dík za info, ale k sambě ze zdrojáku mě asi nepřesvědčíte :-) Petr From petr.pisar na atlas.cz Wed Dec 5 17:29:27 2007 From: petr.pisar na atlas.cz (Petr Pisar) Date: Wed, 5 Dec 2007 16:29:27 +0000 (UTC) Subject: Samba v Centos5 po updatu =?utf-8?Q?pad=E1?= References: <4756BA5F.1090500@luzanky.cz> Message-ID: On 2007-12-05, Petr Špatka wrote: > 192.168.1.107 (192.168.1.107) connect to service eo initially as user > eo (uid=523, gid=523) (pid 5701) > [2007/12/05 14:34:03, 0] > lib/util.c:smb_panic(1654) > > PANIC (pid 5701): push_ascii - dest_len == > -1 Pravdepodobne se jedna o tuto chybu: https://bugzilla.samba.org/show_bug.cgi?id=5087 -- Petr From petr.klima na sobriety.cz Wed Dec 5 23:06:52 2007 From: petr.klima na sobriety.cz (=?ISO-8859-2?Q?Petr_Kl=EDma?=) Date: Wed, 05 Dec 2007 23:06:52 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <200712051417.lB5EHHK2025000@merlin.fonet.cz> References: <200712051417.lB5EHHK2025000@merlin.fonet.cz> Message-ID: <475720FC.3000609@sobriety.cz> Ing. Pavel PaJaSoft Janoušek napsal(a): > linux-bounces+pajasoft=fonet.cz na linux.cz <> wrote: >> nekterych pripadech se da parametrem vysvetlit configure, ze tu danou >> vec MATE, i kdyz si mysli, ze nemate... > > A toto se obecně pro autoconf/automake provádí jak, smím-li se > zeptat? Občas musím různé vygenerované skripty taktéž různě háčkovat, > protože ty výsledky jsou takové všelijaké... Obecne nevim, ja jsem se dostal zatim jenom na uroven spinavych hacku, ktere maji jediny ucinek a to ten, ze to tam a tehdy fungovalo. Nebudu predstirat stoprocentni uspechy, backport cehosi o dve major verze distribuce nazpet uz taky skoncil spatne. Nepronikl jsem tak hluboko, abych resil primo autoconf skript, zvladam jakz-takz pouze jiz vygenerovany configure. Coz obvykle (a ani v pripade tohoto PHP) nevadi, protoze ve zdrojich uz configure je. Je sice odporne dlouhy, ale je to shellovy skript, takze najit misto, kde se ta detekce kazi, neni tak strasne - konecne retezce jako "-lfbclient" se moc casto nevyskytuji. Pak jenom clovek ztravi prijemnou hodinku (pripadne nejednu) na zjistovani, co je spatne a uprave... Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From dejfson na gmail.com Thu Dec 6 10:11:05 2007 From: dejfson na gmail.com (dejfson) Date: Thu, 6 Dec 2007 10:11:05 +0100 Subject: native eps editor Message-ID: Zdravim existuje pod linuxem nejaky nativni editor eps souboru? (tedy kdyz ne nativni tak alespon neco co bez problemu stahne eps, je mozne jej upravit a opet vyexportovat, samozrejme vse vektorove)... diky d. From ivast na mail.t-mobile.sk Thu Dec 6 10:24:02 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Thu, 06 Dec 2007 10:24:02 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <475720FC.3000609@sobriety.cz> References: <200712051417.lB5EHHK2025000@merlin.fonet.cz> <475720FC.3000609@sobriety.cz> Message-ID: <4757BFB2.1090307@mail.t-mobile.sk> DD, ako ta diskusia o hackoch ./configure zacala, dufal som, ze sa naucim ako sa taketo veci riesia spravne. Holt, dozvedel som sa iba, ze aspon traja ich robime podobne :-)))))))))))))))) ivast > Obecne nevim, ja jsem se dostal zatim jenom na uroven spinavych hacku, > ktere maji jediny ucinek a to ten, ze to tam a tehdy fungovalo. Nebudu > predstirat stoprocentni uspechy, backport cehosi o dve major verze > distribuce nazpet uz taky skoncil spatne. > > Nepronikl jsem tak hluboko, abych resil primo autoconf skript, zvladam > jakz-takz pouze jiz vygenerovany configure. Coz obvykle (a ani v pripade > tohoto PHP) nevadi, protoze ve zdrojich uz configure je. Je sice odporne > dlouhy, ale je to shellovy skript, takze najit misto, kde se ta detekce > kazi, neni tak strasne - konecne retezce jako "-lfbclient" se moc casto > nevyskytuji. Pak jenom clovek ztravi prijemnou hodinku (pripadne > nejednu) na zjistovani, co je spatne a uprave... > > From katerina.bubenickova na plbohnice.cz Thu Dec 6 12:09:11 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Thu, 06 Dec 2007 12:09:11 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4756B1CF.9060500@sobriety.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> Message-ID: <4757D857.8000700@plbohnice.cz> Petr Klíma napsal(a): > > > Je tu jedno, abych tak rekl, veprove reseni: Pokud VITE, ze mate vse > potrebne, nevim, ale zkusila bych to, zminene knihovny existuji > muzete ten test v configure zmenit tak, aby vzdy skoncil > uspechem. Typicky se jedna o nalezeni nejake if podminky, pripadne v > nekterych pripadech se da parametrem vysvetlit configure, ze tu danou > vec MATE, i kdyz si mysli, ze nemate... > > > Problem je, ze nerozumim, jak funguje rpmbuild -bb *.spec Zdrojaky se mi rozbalily do SOURCES, je tam taky php-5.1.2.bz2, rozbalila jsem, oeditovala configure, zabalila, nahradila, zkontrolovala. Nepomohlo to, jako bych nic neudelala. V BUILD jsem nasla adresar php-5.1.2, vevnitr configure, to nebylo oeditovane, opravila jsem, rpmbuild zase jako bych nic neudelala. A potom tohle configure bylo zase bez mych oprav, prepsane zpatky. Tak odkud se to bere, v SOURCES jsem nechala stare php-5.1.2.bz2.bak, ale to prece nemuze mit zadny vliv? Nebo nejaky patch muze udelat uplne nove configure, a zrusit moje zaremovani? Kolega uz mi rika, abych toho nechala, ze nam to firma nainstaluje na M$ win, s tim pry nejsou problemy :-( --Katerina From cramers na seznam.cz Thu Dec 6 12:12:09 2007 From: cramers na seznam.cz (Cramer) Date: Thu, 06 Dec 2007 12:12:09 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <20071205152502.GA19512@panelnet.cz> References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734@pzkagis.cz> <20071205152502.GA19512@panelnet.cz> Message-ID: <4757D909.7030403@seznam.cz> Dalibor Straka napsal(a): > On Wed, Dec 05, 2007 at 04:14:25PM +0100, Ludek Finstrle wrote: > >>> Potrebuji tyto disky spojit do RAID 3 {nebo obdobu} pole, kdyby nahodou >>> >> Asi jsem dost neznalek, co to je raid 3? Ja znam 0,1,4,5,6, 10 (1+0), ale >> 3 ne. >> >> > Zkousel jste Google? > > Na tri disky dejte klidne raid 5, ale zprovoznovat se bude sloziteji > pokud nechcete data odzalohovat a nahrat na ciste pole. Uplne > nejjednodussi by bylo pouzit dokoupit ctvrty disk a pouzit sw raid 5. > > U raid3 byva problem s rychlosti, protoze paritni disk zdrzuje. Jinak > redundanci poskytuje pri vypadku libovolneho disku. Temer se nepouziva. > > -- Dalibor Straka > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > Ano, google jsem zkousel, ale nic, co by mi odpovedelo na moje otazky jsem nenasel. Mate pravdu, raid 5 bude rozumnejsi. A jak je to co se tyce velikosti disku? Mam namysli konkretne to, ze na raid budu pouzivat 3x 80gb hdd, ale aby mi fungoval raid 5, tak potrebuji 4 disky. Musim pouzit opet 80gb hdd nebo muzu i vetsi? Nicmene to stale neresi ten problem s migraci za behu :( cRam From orsm na centrum.cz Thu Dec 6 11:52:23 2007 From: orsm na centrum.cz (=?ISO-8859-2?Q?MaReK_Ol=B9avsk=FD?=) Date: Thu, 06 Dec 2007 11:52:23 +0100 Subject: native eps editor In-Reply-To: References: Message-ID: <4757D467.4080400@centrum.cz> Inkscape to nahodou neumi? Vim, ze jsem do nej parkrat importoval z jineho graf. editoru, rozlozil na krivky a dal s tim pracoval, jen nevim, jestli umi export do eps. :wq -- MO - -- MaReK "Penguin" Olšavský PHP Voodoo private mail: orsm na centrum.cz private web: http://blog.devlabs.biz Jabber: Penguin_007 na Jabber.cz; MSN: orsm na centrum.cz; Skype: Penguin_007 tel.: +420-603-519-650; +420-775-154-689 (775-1-LINUX) Na stránce bylo napsáno: "Optimalizováno pro Explorer 5, nebo lepší". Tak jsem přešel na Mozilla Firefox --> http://firefox.czilla.cz/ dejfson napsal(a): > Zdravim > existuje pod linuxem nejaky nativni editor eps souboru? (tedy kdyz ne > nativni tak alespon neco co bez problemu stahne eps, je mozne jej upravit a > opet vyexportovat, samozrejme vse vektorove)... From luf na pzkagis.cz Thu Dec 6 12:26:12 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Thu, 6 Dec 2007 12:26:12 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4757D857.8000700@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> Message-ID: <20071206112612.GA12596@pzkagis.cz> Thu, Dec 06, 2007 at 12:09:11PM +0100, Katerina Bubenickova napsal(a): > Petr Klíma napsal(a): > > Je tu jedno, abych tak rekl, veprove reseni: Pokud VITE, ze mate vse > > potrebne, > nevim, ale zkusila bych to, zminene knihovny existuji > > muzete ten test v configure zmenit tak, aby vzdy skoncil > > uspechem. Typicky se jedna o nalezeni nejake if podminky, pripadne v > > nekterych pripadech se da parametrem vysvetlit configure, ze tu danou > > vec MATE, i kdyz si mysli, ze nemate... > > > Problem je, ze nerozumim, jak funguje rpmbuild -bb *.spec Ten to dela vsechno od zacatku ... Takze bud tu zmenu musite dostat do src.rpm nebo pouzit volbu --short-circuit (doporucuji man rpmbuild). > Kolega uz mi rika, abych toho nechala, ze nam to firma nainstaluje na M$ > win, s tim pry nejsou problemy :-( :o)) Ze on kolega je linux guru a woknun nerozumi, kdyz neco takoveho rika. Luf From luf na pzkagis.cz Thu Dec 6 12:28:51 2007 From: luf na pzkagis.cz (Ludek Finstrle) Date: Thu, 6 Dec 2007 12:28:51 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <4757D909.7030403@seznam.cz> References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734@pzkagis.cz> <20071205152502.GA19512@panelnet.cz> <4757D909.7030403@seznam.cz> Message-ID: <20071206112851.GB12596@pzkagis.cz> Thu, Dec 06, 2007 at 12:12:09PM +0100, Cramer napsal(a): > Dalibor Straka napsal(a): > > On Wed, Dec 05, 2007 at 04:14:25PM +0100, Ludek Finstrle wrote: > > > >>> Potrebuji tyto disky spojit do RAID 3 {nebo obdobu} pole, kdyby nahodou > >>> > >> Asi jsem dost neznalek, co to je raid 3? Ja znam 0,1,4,5,6, 10 (1+0), ale > >> 3 ne. > >> > >> > > Zkousel jste Google? > > > > Na tri disky dejte klidne raid 5, ale zprovoznovat se bude sloziteji > > pokud nechcete data odzalohovat a nahrat na ciste pole. Uplne > > nejjednodussi by bylo pouzit dokoupit ctvrty disk a pouzit sw raid 5. > > > > U raid3 byva problem s rychlosti, protoze paritni disk zdrzuje. Jinak > > redundanci poskytuje pri vypadku libovolneho disku. Temer se nepouziva. > > > > -- Dalibor Straka > > Ano, google jsem zkousel, ale nic, co by mi odpovedelo na moje otazky Google byl na me ;o) > Mate pravdu, raid 5 bude rozumnejsi. ... > potrebuji 4 disky. Musim pouzit opet 80gb hdd nebo muzu i vetsi? > Nicmene to stale neresi ten problem s migraci za behu :( Neni jednodussi pro vas dokoupit ten disk a rozjet raid 1 (2x)? Vykonnostne to bude dle me rychlejsi jak petka. Luf From katerina.bubenickova na plbohnice.cz Thu Dec 6 13:14:02 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Thu, 06 Dec 2007 13:14:02 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <20071206112612.GA12596@pzkagis.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> <20071206112612.GA12596@pzkagis.cz> Message-ID: <4757E78A.7070404@plbohnice.cz> Tak jinak: existuje distribuce, ktera ma podporu php s firebirdem v sobe? --Katerina From dejfson na gmail.com Thu Dec 6 13:29:11 2007 From: dejfson na gmail.com (dejfson) Date: Thu, 6 Dec 2007 13:29:11 +0100 Subject: native eps editor In-Reply-To: <4757D467.4080400@centrum.cz> References: <4757D467.4080400@centrum.cz> Message-ID: hm, zkousel jsem. umi to pres pstoedit, ktery ale nejak krachuje a nemuzu dojit na to proc From ivast na mail.t-mobile.sk Thu Dec 6 13:31:48 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Thu, 06 Dec 2007 13:31:48 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4757E78A.7070404@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> <20071206112612.GA12596@pzkagis.cz> <4757E78A.7070404@plbohnice.cz> Message-ID: <4757EBB4.4020100@mail.t-mobile.sk> na otazku neviem odpovedat, ale bezne sa podobne problemy riesia kompilaciou zo zdrojovych kodov mimo balickovacieho systemu napr. niekde do /opt. ivast > existuje distribuce, ktera ma podporu php s firebirdem v sobe? > > From mcepl na redhat.com Thu Dec 6 14:12:23 2007 From: mcepl na redhat.com (Matej Cepl) Date: Thu, 06 Dec 2007 14:12:23 +0100 Subject: Zdrojove kody u SUSE - kompilace php References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> Message-ID: On Thu, 06 Dec 2007 12:09:11 +0100, Katerina Bubenickova scripst: > Problem je, ze nerozumim, jak funguje rpmbuild -bb *.spec Zdrojaky se mi Což takhle proštudovat rpmbuild(8)? Nevím, jak na SuSE, ale na Fedoře mi to řekne toto: -bb Build a binary package (after doing the %prep, %build, and %install stages). Při pohledu do .spec souboru zjistíte, že: %prep prakticky rozbalí zdrojáky ze Source* do BUILD podadresáře a aplikuje Patch* %build spustí ./configure a make %install spustí make install (plus každá fáze může obsahovat ještě spoustu droboty kolem). > Zdrojaky se mi rozbalily do SOURCES, je tam taky php-5.1.2.bz2, To je rpm -i. Ty zdrojáky tam nechte (pokud možno ty původní ze src.rpm) a jediné změny, které uděláte budou v BUILD. Vybalte si vše do BUILD adresáře (pomocí rpmbuild -bp) a udělejte si kopii BUILD/php-5.1.2 někam jinam (třeba do BUILD/php-5.1.2.orig). Pak do toho BUILD/php-5.1.2 radostně vrtejte, dokud Vám neproběhne ./configure bez problémů (zkontrolujte ve .spec filu, jestli tam ještě před %configure neprovádí .spec nějaké další tanečky -- ty také proveďte, samozřejmě). Poté co to máte ve stavu v jakém to chcete mít, spusťte make distclean a pak cd .. diff -u php-5.1.2{,.orig} >../SOURCES/php-5.1.2-KB-build.diff Prohlédněte php-5.1.2-KB-build.diff v nějakém textovém editoru, jestli obsahuje jenom to, co chcete. Pak přidejte další řádek do .spec filu s novým Patch a do %prep další aplikování Vašeho patche. Po dlouhodobém studiu výstupu BUILD/php-5.1.2/configure --help upravte příslušné volání %configure (nebo ./configure -- nevím, jestli SuSE používá toto makro). > rozbalila jsem, oeditovala configure, zabalila, nahradila, > zkontrolovala. > Nepomohlo to, jako bych nic neudelala. > V BUILD jsem nasla adresar php-5.1.2, vevnitr configure, to nebylo > oeditovane, opravila jsem, rpmbuild zase jako bych nic > neudelala. A potom tohle configure bylo zase bez mych oprav, prepsane > zpatky. Samozřejmě, protože první krok %prep fáze (rpmbuild -bp SPEC/php.spec 2>&1 |less by Vám napovědělo) je rm -rf BUIILD/%{name}-%{version} > Tak odkud se to bere, v SOURCES jsem nechala stare > php-5.1.2.bz2.bak, > ale to prece nemuze mit zadny vliv? Ne, to nemá. > Nebo nejaky patch muze udelat uplne nove configure, a zrusit moje > zaremovani? Ne, vy si musíte udělat patch, kterým si nastavíte co potřeba. > Kolega uz mi rika, abych toho nechala, ze nam to firma nainstaluje na M$ > win, s tim pry nejsou problemy :-( Bez komentáře. Nebo (abych si neodpustil konkurenční rejpnutí) si pořiďte distribuci, která má nějaký suppport ;-). Hezký den, Matěj Cepl -- The content of this message is licensed under a Creative Commons Attribution 3.0 License, Some Rights Reserved. http://creativecommons.org/licenses/by/3.0/us/ From dast na panelnet.cz Thu Dec 6 14:25:11 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Thu, 6 Dec 2007 14:25:11 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <20071206112851.GB12596@pzkagis.cz> References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734@pzkagis.cz> <20071205152502.GA19512@panelnet.cz> <4757D909.7030403@seznam.cz> <20071206112851.GB12596@pzkagis.cz> Message-ID: <20071206132511.GA32476@panelnet.cz> On Thu, Dec 06, 2007 at 12:28:51PM +0100, Ludek Finstrle wrote: > > Mate pravdu, raid 5 bude rozumnejsi. > ... > > potrebuji 4 disky. Musim pouzit opet 80gb hdd nebo muzu i vetsi? > > Nicmene to stale neresi ten problem s migraci za behu :( > > Neni jednodussi pro vas dokoupit ten disk a rozjet raid 1 (2x)? > Vykonnostne to bude dle me rychlejsi jak petka. > Zase vedle ;-). Pokud si odmyslim specielni pripad, jak udelat raid5 spatne (nevhodne parametry filesystemu), tak zapis jednoho velkeho souboru se rozlozi na rekneme 3 disky + dopocitani checksumu a ulozeni na 4. nezavisly disk. Pri rychlem CPU to bude 3x rychlejsi nez jeden disk. Zapis i cteni! 2x raid 1 tzv. raid 1+0 (nikoliv 0+1) zapis bude 2x rychlejsi nez jeden disk, ale bude tolerovat vypadek minimalne jednoho a maximalne az dvou disku, kdyz vypadne z kazdeho miroru jeden. Cteni muze byt jeste rychlejsi. Vyhodou je take, ze vubec nezatezuje cpu (vhodne pro pomale nebo hodne zatizene cpu). -- Dalibor Straka From spam na nagano.cz Thu Dec 6 14:25:37 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Thu, 6 Dec 2007 14:25:37 +0100 (CET) Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4757EBB4.4020100@mail.t-mobile.sk> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> <20071206112612.GA12596@pzkagis.cz> <4757E78A.7070404@plbohnice.cz> <4757EBB4.4020100@mail.t-mobile.sk> Message-ID: Debian Sarge: $ apt-cache search firebird php php5-interbase - interbase/firebird module for php5 To by mohlo byt ono, firebird nepouzivam, tedy neznam, pozadovanou verzi php si taky nepamatuju, thread sleduju jen letmo. Lada On Thu, 6 Dec 2007, ivast wrote: > na otazku neviem odpovedat, ale bezne sa podobne problemy riesia > kompilaciou zo zdrojovych kodov mimo balickovacieho systemu napr. niekde > do /opt. > > ivast > > >> existuje distribuce, ktera ma podporu php s firebirdem v sobe? >> >> > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From djaara na djaara.net Thu Dec 6 14:03:35 2007 From: djaara na djaara.net (Jaroslav Barton) Date: Thu, 06 Dec 2007 14:03:35 +0100 Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: <4757E78A.7070404@plbohnice.cz> References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> <20071206112612.GA12596@pzkagis.cz> <4757E78A.7070404@plbohnice.cz> Message-ID: <1196946215.11053.1.camel@localhost> DD, na Debian Etch: $ apt-cache search php firebird php5-interbase - interbase/firebird module for php5 Katerina Bubenickova píše v Čt 06. 12. 2007 v 13:14 +0100: > Tak jinak: > existuje distribuce, ktera ma podporu php s firebirdem v sobe? > > --Katerina > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux -- Jaroslav Bartoň DjAARA jaroslav.barton na djaara.net xbarto42 na stud.fit.vutbr.cz +420 608 620 897 JID : djaara na medoro.org JID2: djaara na njs.netlab.cz From mcepl na redhat.com Thu Dec 6 14:21:13 2007 From: mcepl na redhat.com (Matej Cepl) Date: Thu, 06 Dec 2007 14:21:13 +0100 Subject: Zdrojove kody u SUSE - kompilace php References: <474C023B.80205@plbohnice.cz> <474BEDEB.9010204@sobriety.cz> <474C035D.9020905@plbohnice.cz> <474C17BD.9000304@plbohnice.cz> <474D6E10.8020908@plbohnice.cz> <474D72C2.4080802@sobriety.cz> <474EB881.6020905__30647.5045312711$1196341489$gmane$org@plbohnice.cz> Message-ID: <9j9l25xcfr.ln2@hubmaier.ceplovi.cz> On Thu, 29 Nov 2007 14:02:57 +0100, Katerina Bubenickova scripst: > flex-old is needed by php5-5.1.2-29.35.i586 Ocitla jste se v zajetí Provides: (balíček může prohlásit, že kromě sám sebe ještě poskytuje něco dalšího). Takže je třeba hledat ne jenom podle jmen balíčků, ale i podle Provides. Můj oblíbený rpm.pbone.net (který to umí, zaškrtněte čudlíček Provides na dolním okraji hledacího formuláře) mi ale u flex-old stejně nic nenašel. Takže nevím. Matěj -- The content of this message is licensed under a Creative Commons Attribution 3.0 License, Some Rights Reserved. http://creativecommons.org/licenses/by/3.0/us/ From dast na panelnet.cz Thu Dec 6 14:35:57 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Thu, 6 Dec 2007 14:35:57 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <4757D909.7030403@seznam.cz> References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734@pzkagis.cz> <20071205152502.GA19512@panelnet.cz> <4757D909.7030403@seznam.cz> Message-ID: <20071206133557.GB32476@panelnet.cz> On Thu, Dec 06, 2007 at 12:12:09PM +0100, Cramer wrote: > Ano, google jsem zkousel, ale nic, co by mi odpovedelo na moje otazky > jsem nenasel. > Mate pravdu, raid 5 bude rozumnejsi. > A jak je to co se tyce velikosti disku? Mam namysli konkretne to, ze na > raid budu pouzivat 3x 80gb hdd, ale aby mi fungoval raid 5, tak > potrebuji 4 disky. Musim pouzit opet 80gb hdd nebo muzu i vetsi? > mdadm nepouziva disky ale partitiony. Vezmete disk, udelate na nem jednu velkou partition 80GB a date ji typ linux raid. Na raid 5 staci 3 disky, ale je to skoda. > Nicmene to stale neresi ten problem s migraci za behu :( > V pripade, ze se rozhodnete pro raid 1+0 se 4 disky, bude situace trivialni. 1. na novem disku udelate jednu velkou raid partition 2. vytvorite raid 10 v degradovanem rezimu (s chybejicim diskem) 3. zkopirujete si partitiony napriklad takto sfdisk -d /dev/hda | sfdisk /dev/md0 4. zkopirujete si data na nove 5. staremu disku vytvorite jednu velkou raid partition, pridate ho do pole a spustite rebuild Je take mozne misto jedne velke raid partition udelat pro kazdy oddil jednu malou a ty pak davat do mirroru (tak to mam treba ja). Pro raid5 urcite pujde udelat neco podobneho. Mozna to bude jednodussi mozna slozitejsi ;-). -- Dalibor From dast na panelnet.cz Thu Dec 6 14:36:59 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Thu, 6 Dec 2007 14:36:59 +0100 Subject: native eps editor In-Reply-To: References: Message-ID: <20071206133659.GC32476@panelnet.cz> On Thu, Dec 06, 2007 at 10:11:05AM +0100, dejfson wrote: > Zdravim > existuje pod linuxem nejaky nativni editor eps souboru? (tedy kdyz ne > nativni tak alespon neco co bez problemu stahne eps, je mozne jej upravit a > opet vyexportovat, samozrejme vse vektorove)... > Mozna xfig. Zatim jsem pouzival jsem jenom xfig->eps. -- Dalibor Straka From mcepl na redhat.com Thu Dec 6 14:43:33 2007 From: mcepl na redhat.com (Matej Cepl) Date: Thu, 06 Dec 2007 14:43:33 +0100 Subject: Raid - migrace za behu systemu References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734__37107.4193892584$1196867763$gmane$org@pzkagis.cz> Message-ID: <5tal25xcfr.ln2@hubmaier.ceplovi.cz> On Wed, 05 Dec 2007 16:14:25 +0100, Ludek Finstrle scripst: > Asi jsem dost neznalek, co to je raid 3? Ja znam 0,1,4,5,6, 10 (1+0), > ale 3 ne. http://en.wikipedia.org/wiki/RAID -- The content of this message is licensed under a Creative Commons Attribution 3.0 License, Some Rights Reserved. http://creativecommons.org/licenses/by/3.0/us/ From mcepl na redhat.com Thu Dec 6 14:39:31 2007 From: mcepl na redhat.com (Matej Cepl) Date: Thu, 06 Dec 2007 14:39:31 +0100 Subject: =?iso-8859-2?q?Distribuce_pro_star=B9=ED_po=E8=EDta=E8e_?= =?iso-8859-2?q?ve_firemn=EDm_prost=F8ed=ED?= References: <47553D69.1060309@seznam.cz> <47554FC5.60804@sobriety.cz> <475567EF.2080308@seznam.cz> <47556AEA.8050707@fi.muni.cz> Message-ID: On Tue, 04 Dec 2007 15:57:46 +0100, Ludek Bartek scripst: > Rozdil bude v tom, ze v Debianu si muzete vybrat mensiho otesanka nez je > GDE/KDE a tim ten system trosku zrychlit. Jinak si myslim, ze i Fedora, > vzhledem k Vasim preferencim, orezana na potrebne minimum by na tom > mohla bezet. Musel byste si s ni akorat trosku pohrat (vyhazet > nepotrebne sluzby, vyhazet nepotrebne ovladace z jadra, ...). Akorát, s postarším hardwarem možná budete muset installovat pomocí kickstartu -- anaconda je dost žravá. Hodně ořezaný Rawhide u nás lidé instalovali pro virtuální stroje i do 90MB paměti a velmi omezeného hardware. Ty služby je samozřejmě nutné seškrtat na kost (což se ale dá -- mnoho jich je vyhoditelných). Matěj -- The content of this message is licensed under a Creative Commons Attribution 3.0 License, Some Rights Reserved. http://creativecommons.org/licenses/by/3.0/us/ From dtoman na fortech.cz Thu Dec 6 15:28:53 2007 From: dtoman na fortech.cz (Dalibor Toman) Date: Thu, 6 Dec 2007 15:28:53 +0100 Subject: Vyber UPS (nahrada APC/MGE) References: <02bb01c82cf8$49f56670$0200330a@fortech.local> <47531B7D.4060007@mts.cz> Message-ID: <084501c83814$53fb0400$28010101@fortech.local> >> > To je zajimavy, ja to zkusim spis s APC Smart-UPS XL 750VA a v > pripade, ze to bude potreba, pripojim k tomu pridavnou baterku, maji > dve velikosti mensi vazi asi 20kg a vetsi 120kg :-) APC s 2mi 120kg battery packy (krabice tak 80x50 v kazde 4 'autobaterky') jsme provozovali. Do te doby nez se neco stalo a a vsech 8 baterii se nafouklo (zrejme nejaky clanek sel do zkratu a ostatni se prebijenim na vyssi napeti behem relativne kratke doby nafoukly). Od te doby misto original aku mame 2 velke Pb baterie (tusim cca polovicni az tretinova cena proti originalu od APC). V instalacich s vice baterkami by to chtelo nejakou inteligentni UPS, ktera by byla schopna na kazde baterce merit napeti pod nejakou zatezi (detekce zkratlych a nefunkcnich clanku) a pripadne i mereni teploty packu (aby teplejsi pack nebyl prebijen). Btw: pro nektere instalace (maly odber, bez potreby shutdownu zarizeni pred vypnutim napajeni) se muze hosit kombinace 13.8V (www.spower-exim.cz) zdroje s pripojenou 12V baterkou. Pokud zarizeni nejedou primo na 230V... D. Toman From jikos na jikos.cz Thu Dec 6 15:54:11 2007 From: jikos na jikos.cz (Jiri Kosina) Date: Thu, 6 Dec 2007 15:54:11 +0100 (CET) Subject: Zdrojove kody u SUSE - kompilace php In-Reply-To: References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> Message-ID: On Thu, 6 Dec 2007, Matej Cepl wrote: > Bez komentáře. Nebo (abych si neodpustil konkurenční rejpnutí) si > pořiďte distribuci, která má nějaký suppport ;-). ? SUSE samozrejme support ma. Pro baliky, ktere jsou v distribuci. -- Jiri Kosina From qaxi na seznam.cz Thu Dec 6 16:47:18 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Thu, 06 Dec 2007 16:47:18 +0100 Subject: Raid - migrace za behu systemu In-Reply-To: <20071206133557.GB32476@panelnet.cz> References: <4756BB84.5070305@seznam.cz> <20071205151425.GD30734@pzkagis.cz> <20071205152502.GA19512@panelnet.cz> <4757D909.7030403@seznam.cz> <20071206133557.GB32476@panelnet.cz> Message-ID: <47581986.3060108@seznam.cz> Dalibor Straka napsal(a): > On Thu, Dec 06, 2007 at 12:12:09PM +0100, Cramer wrote: > >> Ano, google jsem zkousel, ale nic, co by mi odpovedelo na moje otazky >> jsem nenasel. >> Mate pravdu, raid 5 bude rozumnejsi. >> A jak je to co se tyce velikosti disku? Mam namysli konkretne to, ze na >> raid budu pouzivat 3x 80gb hdd, ale aby mi fungoval raid 5, tak >> potrebuji 4 disky. Musim pouzit opet 80gb hdd nebo muzu i vetsi? >> >> > mdadm nepouziva disky ale partitiony. Vezmete disk, udelate na nem jednu > velkou partition 80GB a date ji typ linux raid. Na raid 5 staci 3 disky, > ale je to skoda. > > pokud nepotrebujete mít partition table (např. pro boot partition) tak klidně použijte celý disk ... >> Nicmene to stale neresi ten problem s migraci za behu :( >> >> > V pripade, ze se rozhodnete pro raid 1+0 se 4 disky, bude situace > trivialni. > 1. na novem disku udelate jednu velkou raid partition > 2. vytvorite raid 10 v degradovanem rezimu (s chybejicim diskem) > 3. zkopirujete si partitiony napriklad takto > sfdisk -d /dev/hda | sfdisk /dev/md0 > 4. zkopirujete si data na nove > 5. staremu disku vytvorite jednu velkou raid partition, pridate > ho do pole a spustite rebuild > > Je take mozne misto jedne velke raid partition udelat pro kazdy oddil > jednu malou a ty pak davat do mirroru (tak to mam treba ja). > na tohle je lepsi LVM můžete "logical volumes" (obdoba partition) většovat a zmenšovat podle pořeby (pokud váš FS podporuje resize) pokud přidáte disk můžete volume roztahnout pře víc disků .... > Pro raid5 urcite pujde udelat neco podobneho. Mozna to bude jednodussi > mozna slozitejsi ;-). > -- Dalibor > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > -- Petr Klíma e-mail: qaxi na seznam.cz From spam na nagano.cz Thu Dec 6 18:59:20 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Thu, 06 Dec 2007 18:59:20 +0100 Subject: =?ISO-8859-2?Q?Pomal=E9_waitpid?= Message-ID: <47583878.8000504@nagano.cz> Ahoj, mam program, ktery se forkne a v jeden okamzik musi potomka co nejdrive ukoncit. Zajimalo by me, proc se rodic dozvu o ukonceni potomka az 286ms od volani exit_group? System mel pri testech load average asi 0.5, ale stejne mi to pripadne tak o dva rady pomalejsi, nez bych cekal. parent: 18:46:03.148433 kill(6987, SIGINT) = 0 18:46:03.151321 write(2, "waiting for speaker pid 6987\n", 29) = 29 18:46:03.153225 gettimeofday({1196963163, 153261}, NULL) = 0 18:46:03.153295 waitpid(6987, NULL, 0) = 6987 18:46:03.435995 --- SIGCHLD (Child exited) @ 0 (0) --- child 6987: 18:46:03.087233 write(6, "\370\377\370\377\370\377\0\0\0\0\0\0\10\0\0\0\10\0\10\0"..., 1280) = 1280 18:46:03.149000 --- SIGINT (Interrupt) @ 0 (0) --- 18:46:03.149637 exit_group(0) = ? Druhý dotaz: jak zajistím spolehlivé ukončení potomků po ukončení rodiče? Pripadne mi, ze setpgrp() nekdy nezafunguje, ale priznam se, ze jsem to nezkoumal do detailu. Dík Láďa From dfenze na gmail.com Thu Dec 6 22:59:38 2007 From: dfenze na gmail.com (Anydot) Date: Thu, 6 Dec 2007 22:59:38 +0100 Subject: =?iso-8859-1?Q?Pomal=E9?= waitpid In-Reply-To: <47583878.8000504@nagano.cz> References: <47583878.8000504@nagano.cz> Message-ID: <20071206215938.GA14432@zombie> On (06/12/07 18:59), Ladislav Vaiz wrote: > Ahoj, > mam program, ktery se forkne a v jeden okamzik musi potomka co nejdrive > ukoncit. Zajimalo by me, proc se rodic dozvu o ukonceni potomka az 286ms > od volani exit_group? System mel pri testech load average asi 0.5, ale > stejne mi to pripadne tak o dva rady pomalejsi, nez bych cekal. > > > parent: > 18:46:03.148433 kill(6987, SIGINT) = 0 > 18:46:03.151321 write(2, "waiting for speaker pid 6987\n", 29) = 29 > 18:46:03.153225 gettimeofday({1196963163, 153261}, NULL) = 0 > 18:46:03.153295 waitpid(6987, NULL, 0) = 6987 > 18:46:03.435995 --- SIGCHLD (Child exited) @ 0 (0) --- > > > child 6987: > 18:46:03.087233 write(6, > "\370\377\370\377\370\377\0\0\0\0\0\0\10\0\0\0\10\0\10\0"..., 1280) = 1280 > 18:46:03.149000 --- SIGINT (Interrupt) @ 0 (0) --- > 18:46:03.149637 exit_group(0) = ? > > Druhý dotaz: jak zajistím spolehlivé ukončení potomků po ukončení > rodiče? Pripadne mi, ze setpgrp() nekdy nezafunguje, ale priznam se, ze > jsem to nezkoumal do detailu. > > Dík Láďa dd, u me to vychazi na 3ms: (strace -tt -f ...) 22:57:43.852401 clone(Process 16006 attached child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7d8b6f8) = 16006 [pid 16005] 22:57:43.853200 wait4(-1, Process 16005 suspended [pid 16006] 22:57:43.854411 exit_group(0) = ? Process 16005 resumed Process 16006 detached 22:57:43.854935 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 16006 testovaci program: int main(int argc, char **argv) { int status; if (fork()) wait(&status); else exit(0); } -- Premysl "Anydot" Hruby >> http://na.srck.net << From jikos na jikos.cz Thu Dec 6 23:54:53 2007 From: jikos na jikos.cz (Jiri Kosina) Date: Thu, 6 Dec 2007 23:54:53 +0100 (CET) Subject: =?ISO-8859-2?Q?Pomal=E9_waitpid?= In-Reply-To: <47583878.8000504@nagano.cz> References: <47583878.8000504@nagano.cz> Message-ID: On Thu, 6 Dec 2007, Ladislav Vaiz wrote: > mam program, ktery se forkne a v jeden okamzik musi potomka co nejdrive > ukoncit. Zajimalo by me, proc se rodic dozvu o ukonceni potomka az 286ms > od volani exit_group? System mel pri testech load average asi 0.5, ale > stejne mi to pripadne tak o dva rady pomalejsi, nez bych cekal. Jen tak cvicne, mate kernel s nohz? Pokud ano, zmeni se neco, kdyz nohz vypnete? Vzdycky je tu moznost zprofilovat, kde presne kernel na tech >200ms vytuhne (viz Documentation/basic_profiling.txt). -- Jiri Kosina From Vogl.Lubomir na seznam.cz Fri Dec 7 03:55:13 2007 From: Vogl.Lubomir na seznam.cz (=?iso-8859-2?Q?Lubom=EDr=20Vogl?=) Date: Fri, 07 Dec 2007 03:55:13 +0100 (CET) Subject: =?us-ascii?Q?Debian=20=3A=20zakazani=20aktualizace=20balicku?= Message-ID: <10143.11756-28778-263640354-1196996113@seznam.cz> Zdravim, provedl jsem "apt-get update". Pred tim nez jsem spustil "apt-get dist-upgrade" mi doslo ze dva baliky nemuzu aktualizovat (jsou upravene) a musi zustat v puvodni podobe. Zkousel jsem ruzne nastaveni ale nepovedlo se mi presvedcit apt aby nezahrnul baliky do dist-upgrade procesu. Znate nekdo fintu jak toto provest ? Lubomir Vogl From dast na panelnet.cz Fri Dec 7 04:46:11 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Fri, 7 Dec 2007 04:46:11 +0100 Subject: Debian : zakazani aktualizace balicku In-Reply-To: <10143.11756-28778-263640354-1196996113@seznam.cz> References: <10143.11756-28778-263640354-1196996113@seznam.cz> Message-ID: <20071207034611.GA6582@panelnet.cz> On Fri, Dec 07, 2007 at 03:55:13AM +0100, Lubomír Vogl wrote: > > Zdravim, > > provedl jsem "apt-get update". Pred tim nez jsem spustil "apt-get dist-upgrade" mi doslo ze dva baliky nemuzu aktualizovat (jsou upravene) a musi zustat v puvodni podobe. > Zkousel jsem ruzne nastaveni ale nepovedlo se mi presvedcit apt aby nezahrnul baliky do dist-upgrade procesu. > Znate nekdo fintu jak toto provest ? > aptitude hold package_name -- Dalibor Straka From spam na nagano.cz Fri Dec 7 08:27:58 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Fri, 07 Dec 2007 08:27:58 +0100 Subject: =?ISO-8859-2?Q?Pomal=E9_waitpid?= In-Reply-To: References: <47583878.8000504@nagano.cz> Message-ID: <4758F5FE.4040901@nagano.cz> Jiri Kosina napsal(a): > On Thu, 6 Dec 2007, Ladislav Vaiz wrote: > > >> mam program, ktery se forkne a v jeden okamzik musi potomka co nejdrive >> ukoncit. Zajimalo by me, proc se rodic dozvu o ukonceni potomka az 286ms >> od volani exit_group? System mel pri testech load average asi 0.5, ale >> stejne mi to pripadne tak o dva rady pomalejsi, nez bych cekal. >> > > Jen tak cvicne, mate kernel s nohz? Pokud ano, zmeni se neco, kdyz nohz > vypnete? > > Vzdycky je tu moznost zprofilovat, kde presne kernel na tech >200ms > vytuhne (viz Documentation/basic_profiling.txt). > Děje se to na originálních jádrech v Debianech Sarge a Etch. Child pracuje se zvukem, stává se to nezávisle na tom, zda používá OSS nebo Alsu. Přesněji na Sarge se používá OSS emulace Alsy a na Etchi nativní Alsa. Teď mě napadá, jestli to nemůže být tím, že jsem zvukovku neuzavřel a kernel při likvidaci procesu na ni musí čekat. Nemám teď program k dispozici, ale vyzkouším to. Láďa From dejfson na gmail.com Fri Dec 7 09:57:46 2007 From: dejfson na gmail.com (dejfson) Date: Fri, 7 Dec 2007 09:57:46 +0100 Subject: webdav Message-ID: Zdravim, ve firme nam zakazali VPN pristup z vnejsku. Kdyz jsem se ptal jakym zpusobem muzu pristupovat na sve soubory, bylo mi receno ze jedina moznost je webdav. Nainstaloval jsem si teda davfs2 a zkousim to mountovat. Sice to funguje, ale je to ____strasne_____ pomale. Directory listing trva neco kolem deseti sekund, otvirani/zavirani souboru taktez... nechapu proc. Delam neco spatne? existuje jine reseni? diky d. From lists.subscriber na pragl.cz Fri Dec 7 10:59:58 2007 From: lists.subscriber na pragl.cz (Miroslav Pragl) Date: Fri, 7 Dec 2007 10:59:58 +0100 Subject: webdav References: Message-ID: <008d01c838b7$ede46cc0$e7e31859@czpgn086> jak rychly je napr. vypis toho sameho adresare v browseru? jaky mas desktop? gnome i kde maji podporu webdav, i zde je to pomale? MP funguje, ale je to ____strasne_____ pomale. Directory listing trva neco kolem deseti sekund, otvirani/zavirani souboru From dejfson na gmail.com Fri Dec 7 11:13:26 2007 From: dejfson na gmail.com (dejfson) Date: Fri, 7 Dec 2007 11:13:26 +0100 Subject: webdav In-Reply-To: <008d01c838b7$ede46cc0$e7e31859@czpgn086> References: <008d01c838b7$ede46cc0$e7e31859@czpgn086> Message-ID: no prave, to me zarazi. kdyz v konqueroru napisu webdav://blabla, tak to funguje uzasne rychle. tedy rekneme listing tehoz adresare je tak do sekundy v pohode hotovy. pouzivam gentoo/kde, kernel modul coda + standardni davfs2 co je v portage. mountim pomoci mount -t davfs https://blablabl /mnt/dfs From Pavel.Just na simac.cz Fri Dec 7 13:42:51 2007 From: Pavel.Just na simac.cz (Pavel Just) Date: Fri, 7 Dec 2007 13:42:51 +0100 Subject: Bus 001 Device 002: ID 4348:5523 Message-ID: <47593FCB.2020006@simac.cz> Zdravím Mám USB-serial konvertor, který se mi v lsusb vypíše jako Bus 001 Device 002: ID 4348:5523. modprobe usbserial vendor=0x4348 product=0x5523 proběhne úspěšně. cu -l /dev/ttyUSB0 funguje, ale seriák mi jeden na 19200 a nedaří se mi to změnit. Parametr -s xyz cučka nic neřeší. Jak můžu nastavit rychlost na "seriové" straně ? Pavel -- Tato zpráva neobsahuje viry, protože nepoužívám MS Windows. From ynezz na true.cz Fri Dec 7 14:51:01 2007 From: ynezz na true.cz (Petr Stetiar) Date: Fri, 7 Dec 2007 14:51:01 +0100 Subject: Bus 001 Device 002: ID 4348:5523 In-Reply-To: <47593FCB.2020006@simac.cz> References: <47593FCB.2020006@simac.cz> Message-ID: <20071207135101.GE24585@ibawizard.net> Pavel Just [2007-12-07 13:42:51]: > Zdravím > > Mám USB-serial konvertor, který se mi v lsusb vypíše jako > Bus 001 Device 002: ID 4348:5523. modprobe usbserial vendor=0x4348 > product=0x5523 > proběhne úspěšně. cu -l /dev/ttyUSB0 funguje, ale seriák mi jeden na 19200 > a nedaří se mi to změnit. Parametr -s xyz cučka nic neřeší. > Jak můžu nastavit rychlost na "seriové" straně ? Ja bych nejdrive zkusil minicom, pak setserial. -- ynezz From nazir.cz na gmailSPAMTRAP.com Fri Dec 7 14:45:58 2007 From: nazir.cz na gmailSPAMTRAP.com (Petr Voralek) Date: Fri, 07 Dec 2007 14:45:58 +0100 Subject: Debian : zakazani aktualizace balicku In-Reply-To: References: Message-ID: On 12/07/2007 03:55 AM, *Lubomír Vogl* wrote, and I quote (in part): > dist-upgrade" mi doslo ze dva baliky nemuzu aktualizovat (jsou > upravene) a musi zustat v puvodni podobe. Zkousel jsem ruzne > nastaveni ale nepovedlo se mi presvedcit apt aby nezahrnul baliky do > dist-upgrade procesu. Znate nekdo fintu jak toto provest ? Prosté "připíchnutí" těch verzí balíků do /etc/apt/preferences nepomáhá? Já mám třeba takhle na dvou lenny strojích bloknutý upgrade fglrx (antož ty novější verze stojí za excremento): -----(Cut)------------------------------------------------------------ Package: fglrx-amdcccle Pin: version 8.40.4* Pin-Priority: 1001 Package: fglrx-control Pin: version 8.40.4* Pin-Priority: 1001 Package: fglrx-driver Pin: version 8.40.4* Pin-Priority: 1001 Package: fglrx-kernel-2.6.* Pin: version 8.40.4* Pin-Priority: 1001 Package: fglrx-kernel-src Pin: version 8.40.4* Pin-Priority: 1001 -----(Cut)------------------------------------------------------------ http://www.debian.org/doc/manuals/apt-howto/ch-apt-get.cs.html -- Petr Voralek (JabberID:nazir na jabber.cz) ... Make love, not war; get married and do both! From tomasek na etf.cuni.cz Fri Dec 7 15:25:33 2007 From: tomasek na etf.cuni.cz (Petr Tomasek) Date: Fri, 7 Dec 2007 15:25:33 +0100 Subject: webdav In-Reply-To: References: <008d01c838b7$ede46cc0$e7e31859@czpgn086> Message-ID: <20071207142533.GA11111@ebed.etf.cuni.cz> On Fri, Dec 07, 2007 at 11:13:26AM +0100, dejfson wrote: > no prave, to me zarazi. kdyz v konqueroru napisu webdav://blabla, tak to > funguje uzasne rychle. tedy rekneme listing tehoz adresare je tak do sekundy > v pohode hotovy. pouzivam gentoo/kde, kernel modul coda + standardni davfs2 > co je v portage. > mountim pomoci > mount -t davfs https://blablabl /mnt/dfs Tak to zrejme bude pomale. Napr. webdav v gnome je priserne pomaly. Mam pocit, ze si na server saha nekolikanasobne vickrat, nez je skutecne potreba. Zkusil bych se jen tak podivat, kolik requestu vam generuje davfs a pak treba bombardovat autora bugreportama... P.T. -- Petr Tomasek Jabber: butrus na jabbim.cz SIP: butrus na ekiga.net From Vogl.Lubomir na seznam.cz Sat Dec 8 17:19:34 2007 From: Vogl.Lubomir na seznam.cz (=?iso-8859-2?Q?Lubom=EDr=20Vogl?=) Date: Sat, 08 Dec 2007 17:19:34 +0100 (CET) Subject: =?us-ascii?Q?Re=3A=20Debian=20=3A=20zakazani=20aktualizace=20balicku?= In-Reply-To: <20071207034611.GA6582@panelnet.cz> Message-ID: <10115.11720-1933-29410818-1197130774@seznam.cz> nefunguje to. baliky jsou stale v apt-get dist-upgrade seznamu. > ------------ Původní zpráva ------------ > Od: Dalibor Straka > Předmět: Re: Debian : zakazani aktualizace balicku > Datum: 07.12.2007 05:02:52 > ---------------------------------------- > On Fri, Dec 07, 2007 at 03:55:13AM +0100, Lubomír Vogl wrote: > > > > Zdravim, > > > > provedl jsem "apt-get update". Pred tim nez jsem spustil "apt-get > dist-upgrade" mi doslo ze dva baliky nemuzu aktualizovat (jsou upravene) a musi > zustat v puvodni podobe. > > Zkousel jsem ruzne nastaveni ale nepovedlo se mi presvedcit apt aby nezahrnul > baliky do dist-upgrade procesu. > > Znate nekdo fintu jak toto provest ? > > > aptitude hold package_name > > -- Dalibor Straka > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > > From Vogl.Lubomir na seznam.cz Sat Dec 8 17:27:53 2007 From: Vogl.Lubomir na seznam.cz (=?iso-8859-2?Q?Lubom=EDr=20Vogl?=) Date: Sat, 08 Dec 2007 17:27:53 +0100 (CET) Subject: =?us-ascii?Q?Re=3A=20Debian=20=3A=20zakazani=20aktualizace=20balicku?= In-Reply-To: Message-ID: <10113.11718-2195-1707367967-1197131273@seznam.cz> Bohuzel. Porad tam je (v apt-get dist-upgrade) > ------------ Původní zpráva ------------ > Od: Petr Voralek > Předmět: Re: Debian : zakazani aktualizace balicku > Datum: 07.12.2007 15:05:17 > ---------------------------------------- > On 12/07/2007 03:55 AM, *Lubomír Vogl* wrote, and I quote (in part): > > > dist-upgrade" mi doslo ze dva baliky nemuzu aktualizovat (jsou > > upravene) a musi zustat v puvodni podobe. Zkousel jsem ruzne > > nastaveni ale nepovedlo se mi presvedcit apt aby nezahrnul baliky do > > dist-upgrade procesu. Znate nekdo fintu jak toto provest ? > > Prosté "připíchnutí" těch verzí balíků do /etc/apt/preferences > nepomáhá? Já mám třeba takhle na dvou lenny strojích bloknutý upgrade > fglrx (antož ty novější verze stojí za excremento): > > -----(Cut)------------------------------------------------------------ > Package: fglrx-amdcccle > Pin: version 8.40.4* > Pin-Priority: 1001 > > Package: fglrx-control > Pin: version 8.40.4* > Pin-Priority: 1001 > > Package: fglrx-driver > Pin: version 8.40.4* > Pin-Priority: 1001 > > Package: fglrx-kernel-2.6.* > Pin: version 8.40.4* > Pin-Priority: 1001 > > Package: fglrx-kernel-src > Pin: version 8.40.4* > Pin-Priority: 1001 > -----(Cut)------------------------------------------------------------ > > http://www.debian.org/doc/manuals/apt-howto/ch-apt-get.cs.html > > -- > Petr Voralek (JabberID:nazir na jabber.cz) > > ... Make love, not war; get married and do both! > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > > From Vogl.Lubomir na seznam.cz Sat Dec 8 17:32:53 2007 From: Vogl.Lubomir na seznam.cz (=?iso-8859-2?Q?Lubom=EDr=20Vogl?=) Date: Sat, 08 Dec 2007 17:32:53 +0100 (CET) Subject: =?us-ascii?Q?Re=3A=20Debian=20=3A=20zakazani=20aktualizace=20balicku=20=3A=20Vyreseno?= In-Reply-To: <10113.11718-2195-1707367967-1197131273@seznam.cz> Message-ID: <10111.11716-2274-879817088-1197131573@seznam.cz> chtelo to apt-get clean > ------------ Původní zpráva ------------ > Od: Lubomír Vogl > Předmět: Re: Debian : zakazani aktualizace balicku > Datum: 08.12.2007 17:28:17 > ---------------------------------------- > Bohuzel. Porad tam je (v apt-get dist-upgrade) > > > ------------ Původní zpráva ------------ > > Od: Petr Voralek > > Předmět: Re: Debian : zakazani aktualizace balicku > > Datum: 07.12.2007 15:05:17 > > ---------------------------------------- > > On 12/07/2007 03:55 AM, *Lubomír Vogl* wrote, and I quote (in part): > > > > > dist-upgrade" mi doslo ze dva baliky nemuzu aktualizovat (jsou > > > upravene) a musi zustat v puvodni podobe. Zkousel jsem ruzne > > > nastaveni ale nepovedlo se mi presvedcit apt aby nezahrnul baliky do > > > dist-upgrade procesu. Znate nekdo fintu jak toto provest ? > > > > Prosté "připíchnutí" těch verzí balíků do /etc/apt/preferences > > nepomáhá? Já mám třeba takhle na dvou lenny strojích bloknutý upgrade > > fglrx (antož ty novější verze stojí za excremento): > > > > -----(Cut)------------------------------------------------------------ > > Package: fglrx-amdcccle > > Pin: version 8.40.4* > > Pin-Priority: 1001 > > > > Package: fglrx-control > > Pin: version 8.40.4* > > Pin-Priority: 1001 > > > > Package: fglrx-driver > > Pin: version 8.40.4* > > Pin-Priority: 1001 > > > > Package: fglrx-kernel-2.6.* > > Pin: version 8.40.4* > > Pin-Priority: 1001 > > > > Package: fglrx-kernel-src > > Pin: version 8.40.4* > > Pin-Priority: 1001 > > -----(Cut)------------------------------------------------------------ > > > > http://www.debian.org/doc/manuals/apt-howto/ch-apt-get.cs.html > > > > -- > > Petr Voralek (JabberID:nazir na jabber.cz) > > > > ... Make love, not war; get married and do both! > > _______________________________________________ > > Linux mailing list > > Linux na linux.cz > > http://www.linux.cz/mailman/listinfo/linux > > > > > > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > > From dast na panelnet.cz Sat Dec 8 17:53:13 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Sat, 8 Dec 2007 17:53:13 +0100 Subject: Debian : zakazani aktualizace balicku In-Reply-To: <10115.11720-1933-29410818-1197130774@seznam.cz> References: <20071207034611.GA6582@panelnet.cz> <10115.11720-1933-29410818-1197130774@seznam.cz> Message-ID: <20071208165313.GA28498@panelnet.cz> On Sat, Dec 08, 2007 at 05:19:34PM +0100, Lubomír Vogl wrote: > nefunguje to. baliky jsou stale v apt-get dist-upgrade seznamu. > Je mozne pouzit aptitude hold balik a pak aptitude safe-upgrade. To mi balik drzi. Nebo pouzit vice low-level "echo e2fslibs hold | dpkg --set-selections" # dpkg -l e2fslibs ii e2fslibs 1.40.2-1 ext2 filesystem libraries # echo e2fslibs hold | dpkg --set-selections # dpkg -l e2fslibs hi e2fslibs 1.40.2-1 ext2 filesystem libraries Mimochodem je toho plny google. Staci zadat "debian hold package" apod. -- Dalibor Straka From honza na rezab.eu Sun Dec 9 21:58:29 2007 From: honza na rezab.eu (Jan Rezab) Date: Sun, 09 Dec 2007 21:58:29 +0100 Subject: IPSec / NAT 1:1 Message-ID: <5efac$475c56f5$d5dcd90a$9198@news.chello.cz> Dobry den. Mam problem s IPSec. Situace je nasledujici: 192.168.5.0/24 <-> firewall A (IPSec GW) <-> ADSL router <-> internet <-> firewall B <-> 192.168.2.0/24 V logu viz nize je, ze IPSEC se nahodi v poradku. Ze site 192.168.5.0 do site 192.168.2.0 to funguje dobre (ping i telnet). Ale obracene se uz nedostanu ani pingem ani telnetem. Vubec netusim proc. V iptables problem neni, protoze i kdyz iptables vypnu tak se to chova stejne. Muzete mne trochu nasmerovat co s tim? Predem podotykam, ze s googlem jsem si povidal cely vikend. Predem diky. Firewall A slouzi jako firewall, NAT a IPSec GW. Eth0 = 192.168.1.10. ADSL router slouzi pro pripojen k internet. Je na nem nastaven NAT 1:1 a vypnty firewall. WAN = XXX.XXX.XXX.XXX natovana jedna ku jedne na 192.168.1.10. Firewall B slouzi jako firewall, NAT a IPSec GW. Eth0 = YYY.YYY.YYY.YYY Nataveni firewall A: ------------------------------------------------------------------------ #!/usr/sbin/setkey -f flush; spdflush; spdadd 192.168.2.0/24 192.168.5.0/24 any -P in ipsec esp/tunnel/YYY.YYY.YYY.YYY-192.168.1.10/require; spdadd 192.168.2.0/24 192.168.1.10/32 any -P in ipsec esp/tunnel/YYY.YYY.YYY.YYY-192.168.1.10/require; spdadd YYY.YYY.YYY.YYY/32 192.168.1.10/32 any -P in ipsec esp/tunnel/YYY.YYY.YYY.YYY-192.168.1.10/require; spdadd YYY.YYY.YYY.YYY/32 192.168.5.0/24 any -P in ipsec esp/tunnel/YYY.YYY.YYY.YYY-192.168.1.10/require; spdadd 192.168.5.0/24 192.168.2.0/24 any -P out ipsec esp/tunnel/192.168.1.10-YYY.YYY.YYY.YYY/require; spdadd 192.168.5.0/24 YYY.YYY.YYY.YYY/32 any -P out ipsec esp/tunnel/192.168.1.10-YYY.YYY.YYY.YYY/require; spdadd 192.168.1.10/32 YYY.YYY.YYY.YYY/32 any -P out ipsec esp/tunnel/192.168.1.10-YYY.YYY.YYY.YYY/require; spdadd 192.168.1.10/32 192.168.2.0/24 any -P out ipsec esp/tunnel/192.168.1.10-YYY.YYY.YYY.YYY/require; ------------------------------------------------------------------------ #/etc/racoon/racoon.conf path pre_shared_key "/etc/racoon/psk.txt"; log notify; listen { isakmp 192.168.1.10; strict_address; } remote YYY.YYY.YYY.YYY { exchange_mode main; send_cr off; send_cert off; proposal { encryption_algorithm blowfish; hash_algorithm sha1; authentication_method pre_shared_key; dh_group 2; } } sainfo address 192.168.5.0/24 any address 192.168.2.0/24 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } sainfo address 192.168.1.10/32 any address 192.168.2.0/24 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } sainfo address 192.168.1.10/32 any address YYY.YYY.YYY.YYY any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } sainfo address 192.168.5.0/24 any address YYY.YYY.YYY.YYY/32 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } ------------------------------------------------------------------------ Nataveni firewall B: ------------------------------------------------------------------------ flush; spdflush; spdadd 192.168.2.0/24 192.168.5.0/24 any -P out ipsec esp/tunnel/YYY.YYY.YYY.YYY-XXX.XXX.XXX.XXX/require; spdadd 192.168.2.0/24 XXX.XXX.XXX.XXX/32 any -P out ipsec esp/tunnel/YYY.YYY.YYY.YYY-XXX.XXX.XXX.XXX/require; spdadd YYY.YYY.YYY.YYY/32 XXX.XXX.XXX.XXX/32 any -P out ipsec esp/tunnel/YYY.YYY.YYY.YYY-XXX.XXX.XXX.XXX/require; spdadd YYY.YYY.YYY.YYY/32 192.168.5.0/24 any -P out ipsec esp/tunnel/YYY.YYY.YYY.YYY-XXX.XXX.XXX.XXX/require; spdadd 192.168.5.0/24 192.168.2.0/24 any -P in ipsec esp/tunnel/XXX.XXX.XXX.XXX-YYY.YYY.YYY.YYY/require; spdadd 192.168.5.0/24 YYY.YYY.YYY.YYY/32 any -P in ipsec esp/tunnel/XXX.XXX.XXX.XXX-YYY.YYY.YYY.YYY/require; spdadd XXX.XXX.XXX.XXX/32 YYY.YYY.YYY.YYY/32 any -P in ipsec esp/tunnel/XXX.XXX.XXX.XXX-YYY.YYY.YYY.YYY/require; spdadd XXX.XXX.XXX.XXX/32 192.168.2.0/24 any -P in ipsec esp/tunnel/XXX.XXX.XXX.XXX-YYY.YYY.YYY.YYY/require; ------------------------------------------------------------------------ #/etc/racoon/racoon.conf path pre_shared_key "/etc/racoon/psk.txt"; log notify; listen { isakmp YYY.YYY.YYY.YYY; strict_address; } remote XXX.XXX.XXX.XXX { exchange_mode main; send_cr off; send_cert off; proposal { encryption_algorithm blowfish; hash_algorithm sha1; authentication_method pre_shared_key; dh_group 2; } } sainfo address 192.168.2.0/24 any address 192.168.5.0/24 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } sainfo address YYY.YYY.YYY.YYY/24 any address 192.168.5.0/24 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } sainfo address YYY.YYY.YYY.YYY/24 any address XXX.XXX.XXX.XXX/32 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } sainfo address 192.168.2.0/24 any address XXX.XXX.XXX.XXX/32 any { pfs_group 2; encryption_algorithm blowfish; authentication_algorithm hmac_sha1, hmac_md5; compression_algorithm deflate; } ------------------------------------------------------------------------ Ukazka logu (firewall A): Dec 9 20:02:26 Firewall A racoon: INFO: request for establishing IPsec-SA was queued due to no phase1 found. Dec 9 20:02:38 Firewall A racoon: INFO: respond new phase 1 negotiation: 192.168.1.10[500]<=>YYY.YYY.YYY.YYY[500] Dec 9 20:02:38 Firewall A racoon: INFO: begin Identity Protection mode. Dec 9 20:02:38 Firewall A racoon: INFO: received Vendor ID: DPD Dec 9 20:02:38 Firewall A racoon: INFO: ISAKMP-SA established 192.168.1.10[500]-YYY.YYY.YYY.YYY[500] spi:2ac7c217b0990d29:9135535761c9c63d Dec 9 20:02:39 Firewall A racoon: INFO: initiate new phase 2 negotiation: 192.168.1.10[500]<=>YYY.YYY.YYY.YYY[500] Dec 9 20:02:39 Firewall A racoon: INFO: respond new phase 2 negotiation: 192.168.1.10[500]<=>YYY.YYY.YYY.YYY[500] Dec 9 20:02:40 Firewall A racoon: INFO: IPsec-SA established: ESP/Tunnel YYY.YYY.YYY.YYY[0]->192.168.1.10[0] spi=251162039(0xef86db7) Dec 9 20:02:40 Firewall A racoon: INFO: IPsec-SA established: ESP/Tunnel 192.168.1.10[0]->YYY.YYY.YYY.YYY[0] spi=217528202(0xcf7378a) Dec 9 20:02:40 Firewall A racoon: INFO: IPsec-SA established: ESP/Tunnel YYY.YYY.YYY.YYY[0]->192.168.1.10[0] spi=236517284(0xe18f7a4) Dec 9 20:02:40 Firewall A racoon: INFO: IPsec-SA established: ESP/Tunnel 192.168.1.10[0]->YYY.YYY.YYY.YYY[0] spi=216996803(0xcef1bc3) Dec 9 20:02:43 Firewall A racoon: INFO: received Vendor ID: DPD Dec 9 20:02:43 Firewall A racoon: INFO: ISAKMP-SA established 192.168.1.10[500]-YYY.YYY.YYY.YYY[500] spi:c913c7ca21e16755:b386ad01c9aa5926 Ukazka logu (firewall B): Dec 9 20:02:34 Firewall B racoon: INFO: @(#)ipsec-tools 0.6.6 (http://ipsec-tools.sourceforge.net) Dec 9 20:02:34 Firewall B racoon: INFO: @(#)This product linked OpenSSL 0.9.8c 05 Sep 2006 (http://www.openssl.org/) Dec 9 20:02:35 Firewall B racoon: INFO: YYY.YYY.YYY.YYY[500] used as isakmp port (fd=7) Dec 9 20:02:35 Firewall B racoon: INFO: YYY.YYY.YYY.YYY[500] used for NAT-T Dec 9 20:02:35 Firewall B racoon: INFO: IPsec-SA request for XXX.XXX.XXX.XXX queued due to no phase1 found. Dec 9 20:02:35 Firewall B racoon: INFO: initiate new phase 1 negotiation: YYY.YYY.YYY.YYY[500]<=>XXX.XXX.XXX.XXX[500] Dec 9 20:02:35 Firewall B racoon: INFO: begin Identity Protection mode. Dec 9 20:02:36 Firewall B racoon: INFO: received Vendor ID: DPD Dec 9 20:02:36 Firewall B racoon: INFO: ISAKMP-SA established YYY.YYY.YYY.YYY[500]-XXX.XXX.XXX.XXX[500] spi:2ac7c217b0990d29:9135535761c9c6 Dec 9 20:02:37 Firewall B racoon: INFO: initiate new phase 2 negotiation: YYY.YYY.YYY.YYY[500]<=>XXX.XXX.XXX.XXX[500] Dec 9 20:02:37 Firewall B racoon: INFO: respond new phase 2 negotiation: YYY.YYY.YYY.YYY[500]<=>XXX.XXX.XXX.XXX[500] Dec 9 20:02:37 Firewall B racoon: INFO: IPsec-SA established: ESP/Tunnel XXX.XXX.XXX.XXX[0]->YYY.YYY.YYY.YYY[0] spi=216996803(0xcef1bc3) Dec 9 20:02:37 Firewall B racoon: INFO: IPsec-SA established: ESP/Tunnel YYY.YYY.YYY.YYY[0]->XXX.XXX.XXX.XXX[0] spi=236517284(0xe18f7a4) Dec 9 20:02:37 Firewall B racoon: INFO: IPsec-SA established: ESP/Tunnel XXX.XXX.XXX.XXX[0]->YYY.YYY.YYY.YYY[0] spi=217528202(0xcf7378a) Dec 9 20:02:37 Firewall B racoon: INFO: IPsec-SA established: ESP/Tunnel YYY.YYY.YYY.YYY[0]->XXX.XXX.XXX.XXX[0] spi=251162039(0xef86db7) From liko na wardogs.sk Sun Dec 9 22:22:05 2007 From: liko na wardogs.sk (Bruce) Date: Sun, 09 Dec 2007 22:22:05 +0100 Subject: Kodovanie nazvov suborov Message-ID: <475C5C7D.4030209@wardogs.sk> Zdravim, mam taky jeden problem a vobec netusim, na co sa zamerat. Na serveri mam ulozeny subor "Obrázok 068.jpg" a ked zadam url do browsera, obrazok sa nenacita. Problem je v tom, ze nazov suboru sa prehodi na "Obr%C3%A1zok%20068.jpg", ale apache toto nevie najst a v logu je, ze subor "Obr\xc3\xa1zok 068.jpg" neexistuje. Predpokladam, ze toto nieje korektne chovanie a chyba bude niekde u mna na serveri, viete ma niekto nakopnut? Vdaka, Bruce From Jan na houstek.net Sun Dec 9 22:08:17 2007 From: Jan na houstek.net (Jan Houstek) Date: Sun, 9 Dec 2007 22:08:17 +0100 (CET) Subject: Swap a MD raid Message-ID: Zdravim. Zkoumal jste nekdo, zda je s 2.6 kernelem bezpecne pouzit swap nad software raid realizovanym klasickym md driverem? V tom smyslu, ze odswapovani nevyzaduje dalsi alokaci fyzicke pameti. Naposledy jsem se ve vnitrnostech linuxoveho VM vyznal na sklonku rady 2.2, pokud jste to uz nekdo zkoumal nebo mate relevantni odkaz, usetrite mi spoustu casu. -- Honza Houstek From lukesh na seznam.cz Sun Dec 9 23:43:53 2007 From: lukesh na seznam.cz (Jaroslav Lukesh) Date: Sun, 9 Dec 2007 23:43:53 +0100 Subject: Swap a MD raid References: Message-ID: <099d01c83ab4$fbae2f40$6164a8c0@xp> Prakticky to používám nad raid1 a to velmi intenzivně, nikdy mi to ale takto neslítlo (padal než se stroj "zahořel", do půl roku od výroby, nebo že mu někdo vypnul šťávu). ----- Original Message ----- From: "Jan Houstek" Zkoumal jste nekdo, zda je s 2.6 kernelem bezpecne pouzit swap nad software raid realizovanym klasickym md driverem? V tom smyslu, ze odswapovani nevyzaduje dalsi alokaci fyzicke pameti. From dast na panelnet.cz Mon Dec 10 03:24:19 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 10 Dec 2007 03:24:19 +0100 Subject: Swap a MD raid In-Reply-To: References: Message-ID: <20071210022419.GA13233@panelnet.cz> Ahoj! On Sun, Dec 09, 2007 at 10:08:17PM +0100, Jan Houstek wrote: > Zdravim. > > Zkoumal jste nekdo, zda je s 2.6 kernelem bezpecne pouzit swap nad > software raid realizovanym klasickym md driverem? V tom smyslu, ze > odswapovani nevyzaduje dalsi alokaci fyzicke pameti. > Pouzivam swap na sw raid1 pres md na par strojich a neni s tim problem. Zacina se swapovat drive nez dojde vsechna pamet. Prah a agresivitu si muzes nastavit jak chces. -- Dalibor Straka From ivast na mail.t-mobile.sk Mon Dec 10 09:46:48 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Mon, 10 Dec 2007 09:46:48 +0100 Subject: sprava pamate na linux-2.4 Message-ID: <475CFCF8.7050206@mail.t-mobile.sk> DD vospolok, pocas skumania ineho problemu som prisiel na spravanie systemu, ktore by som potreboval vysvetlit: uname -r 2.4.20-28.7bigmem free -m: total used free shared buffers cached Mem: 3023 2086 936 0 130 1751 -/+ buffers/cache: 204 2819 Swap: 2023 3 2020 ulimit ulimited a ked spustim skript: [x na y z]$cat memtest.pl #!/usr/bin/perl my $kb=1024*1024*1024; print "trying allocate ",$kb/1024," kb of memory\n"; my $a = "a" x $kb; sleep 30000; [x na y z]$ perl memtest.pl trying allocate 1048576 kb of memory Out of memory! [x na y z]$ Nemal by nahodou uvolnit "cached" a odswapovat co sa da ? dik ivast From dast na panelnet.cz Mon Dec 10 10:09:31 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 10 Dec 2007 10:09:31 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: <475CFCF8.7050206@mail.t-mobile.sk> References: <475CFCF8.7050206@mail.t-mobile.sk> Message-ID: <20071210090931.GA19872@panelnet.cz> On Mon, Dec 10, 2007 at 09:46:48AM +0100, ivast wrote: > DD vospolok, pocas skumania ineho problemu som prisiel na spravanie > systemu, ktore by som potreboval vysvetlit: > uname -r 2.4.20-28.7bigmem > > free -m: > total used free shared buffers cached > Mem: 3023 2086 936 0 130 1751 > -/+ buffers/cache: 204 2819 > Swap: 2023 3 2020 > > ulimit ulimited > a ked spustim skript: > > [x na y z]$cat memtest.pl > #!/usr/bin/perl > my $kb=1024*1024*1024; > print "trying allocate ",$kb/1024," kb of memory\n"; > my $a = "a" x $kb; > sleep 30000; > [x na y z]$ perl memtest.pl > trying allocate 1048576 kb of memory > Out of memory! > [x na y z]$ > > To je vazne divne, me to normalne funguje ;-). Kernel 2.6.23-rc8 x86_64. Akorat se mi rozsviti disk a zacne se swapovat, ale uspesne ;). Zkusim jeste 2.4. az si vzpomenu, kde ji mam. -- Dalibor Straka From mj na ucw.cz Mon Dec 10 10:44:45 2007 From: mj na ucw.cz (Martin `MJ' Mares) Date: Mon, 10 Dec 2007 10:44:45 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: <475CFCF8.7050206@mail.t-mobile.sk> References: <475CFCF8.7050206@mail.t-mobile.sk> Message-ID: Zdravim! > ulimit ulimited > a ked spustim skript: > > [x na y z]$cat memtest.pl > #!/usr/bin/perl > my $kb=1024*1024*1024; > print "trying allocate ",$kb/1024," kb of memory\n"; > my $a = "a" x $kb; > sleep 30000; > [x na y z]$ perl memtest.pl > trying allocate 1048576 kb of memory > Out of memory! Urcite je pravda, ze retezec, ktery vytvarite, zabere $kb bajtu pameti? Copak na to rekne strace? Have a nice fortnight -- Martin `MJ' Mares http://mj.ucw.cz/ Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth "A semicolon. Another line ends in the dance of camel." -- Kabir Ahuja From ivast na mail.t-mobile.sk Mon Dec 10 10:47:29 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Mon, 10 Dec 2007 10:47:29 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: References: <475CFCF8.7050206@mail.t-mobile.sk> Message-ID: <475D0B31.4090009@mail.t-mobile.sk> DD, nie je dolezite ci zaberie exaktne tolko pamate, ako som mu specifikoval. Hlavne ma zaujima, ci predpoklad co som mal, ze by mal upratat a odswapovat je spravny. Kus zo strace, ktory sa mi zda dolezity: 12343 write(1, "trying allocate 1048576 kb of me"..., 37) = 37 12343 mmap2(NULL, 1073745920, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x401fd000 12343 mmap2(NULL, 1073745920, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory) 12343 brk(0x4810a000) = 0x8109000 12343 mmap2(NULL, 2097152, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_NORESERVE, -1, 0) = 0x801fe000 12343 munmap(0x801fe000, 8192) = 0 12343 munmap(0x80300000, 1040384) = 0 12343 mmap2(0x80200000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x80200000 12343 mmap2(NULL, 1073745920, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory) 12343 mmap2(NULL, 1073745920, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory) 12343 write(2, "Out of memory!\n", 15) = 15 dik ivast Martin `MJ' Mares wrote: > Urcite je pravda, ze retezec, ktery vytvarite, zabere $kb bajtu pameti? > > Copak na to rekne strace? > > From katerina.bubenickova na plbohnice.cz Mon Dec 10 12:48:17 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Mon, 10 Dec 2007 12:48:17 +0100 Subject: Zdrojove kody u SUSE - kompilace php-[VYRESENO] In-Reply-To: References: <474C023B.80205@plbohnice.cz> <6rat15xk7k.ln2@hubmaier.ceplovi.cz> <47565D5C.8010700@plbohnice.cz> <47566674.4070801@plbohnice.cz> <475694AA.5030808@plbohnice.cz> <47569822.8050208@sobriety.cz> <4756AFE3.2020908@plbohnice.cz> <4756B1CF.9060500@sobriety.cz> <4757D857.8000700@plbohnice.cz> Message-ID: <475D2781.8080402@plbohnice.cz> Uz mi to funguje, vsem moc diky za rady a trpelivost. Co jsem se naucila: 1. Existuje program rpmbuild 2. Zdrojove kody k SUSE jsou take v SDK. 3. K vyreseni zavislosti je nutne pouzit yast, protoze nektere balicky maji provides, a to se nepozna z nazvu balicku 4. Pro preklad php s firebirdem je treba do php.spec napsat podminku --with-interbase=shared,/opt/firebird a pridat sekci podobnou mysql. (zrejme nestaci jenom --with-interbase=/opt/firebird) 5. Kdyz preinstalovavam balicky (apache), je treba bezpodminecne zazalohovat konfiguracni soubory ;-) 6. Firebird pri instalaci vygeneruje heslo a ulozi ho pod nazvem SYSDBA.password. Heslo masterkey neplati. Preji vsem krasny den. --Katerina Bubenickova From Jan na houstek.net Mon Dec 10 11:08:20 2007 From: Jan na houstek.net (Jan Houstek) Date: Mon, 10 Dec 2007 11:08:20 +0100 (CET) Subject: Swap a MD raid In-Reply-To: <099d01c83ab4$fbae2f40$6164a8c0@xp> References: <099d01c83ab4$fbae2f40$6164a8c0@xp> Message-ID: On Sun, 9 Dec 2007, Jaroslav Lukesh wrote: > Prakticky to používám nad raid1 a to velmi intenzivně, nikdy mi to ale > takto neslítlo (padal než se stroj "zahořel", do půl roku od výroby, > nebo že mu někdo vypnul šťávu). Omlouvám se za nepřesnou formulaci -- jde mi o potvrzení na úrovni kódu jádra. Zkušeností, pozorování, zátěžových testů atp. mám dost vlastních. Před pár lety jsem si dělal takovou rešerši a tehdy jsem zjistil, že swap na raid1 (přes MD) není bezpečný a skutečně může vést k deadlocku. Podařilo se mi to i exploitnout. Od té doby dávám swap mimo raid, což má zas tu nepříjemnost, že při poruše disku téměř jistě stroj vytuhne. Od té doby ale snad údajně už touto bolestí md driver netrpí (a dokonce snad ani loopback, VFS vrstva při swapu v souboru, či většina zařízení realizovaných přes device-mapper včetně LVM). Než se ale zas ponořím do zdrojáku (který se v tomto ohledu změnil k nepoznání), zajímalo mě, zda už někdo neřešil totéž. -- Honza Houštěk From mj na ucw.cz Mon Dec 10 11:11:47 2007 From: mj na ucw.cz (Martin `MJ' Mares) Date: Mon, 10 Dec 2007 11:11:47 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: <475D0B31.4090009@mail.t-mobile.sk> References: <475CFCF8.7050206@mail.t-mobile.sk> <475D0B31.4090009@mail.t-mobile.sk> Message-ID: Zdravim! > DD, nie je dolezite ci zaberie exaktne tolko pamate, ako som mu > specifikoval. Hlavne ma zaujima, ci predpoklad co som mal, ze by mal > upratat a odswapovat je spravny. Neni -- kernel by take mohl usoudit, ze tolik pameti mit nebude, ani kdyby vsechno odswapoval, a rovnou alokaci odmitnout. Zde je to ostatne videt: > 12343 write(1, "trying allocate 1048576 kb of me"..., 37) = 37 > 12343 mmap2(NULL, 1073745920, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x401fd000 > 12343 mmap2(NULL, 1073745920, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = -1 ENOMEM (Cannot allocate memory) Prvni alokace gigabytu pameti se podarila, druha uz ne. Have a nice fortnight -- Martin `MJ' Mares http://mj.ucw.cz/ Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth "This is an object-oriented system. If we change anything, the users object." From ivast na mail.t-mobile.sk Mon Dec 10 11:25:39 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Mon, 10 Dec 2007 11:25:39 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: References: <475CFCF8.7050206@mail.t-mobile.sk> <475D0B31.4090009@mail.t-mobile.sk> Message-ID: <475D1423.50700@mail.t-mobile.sk> Trafil ste do cierneho na prvy krat: - moj predpoklad o velkosti alokovanej pamate nebol spravny - kernel zjavne ma nejake mne zatial nezname pravidla, ktore neumoznia alokovat 2x po sebe 1Gb pamate jednemu procesu. Po zmenseni velkosti toho stringu tak, aby realne zaberal o nieco menej ako 1GB a spusteni viacerych instancii, zacalo vsetko fungovat podla ocakavania: upratovanie v disk cache aj swapping. diky ivast Martin `MJ' Mares wrote: > Neni -- kernel by take mohl usoudit, ze tolik pameti mit nebude, > ani kdyby vsechno odswapoval, a rovnou alokaci odmitnout. > > Prvni alokace gigabytu pameti se podarila, druha uz ne. > > > From cavo+konf na cavo.sk Mon Dec 10 11:42:14 2007 From: cavo+konf na cavo.sk (Marian Cavojsky) Date: Mon, 10 Dec 2007 11:42:14 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: <475D1423.50700@mail.t-mobile.sk> References: <475CFCF8.7050206@mail.t-mobile.sk> <475D0B31.4090009@mail.t-mobile.sk> <475D1423.50700@mail.t-mobile.sk> Message-ID: <20071210104214.GB20022@stone.cavo.sk> On Mon, Dec 10, 2007 at 11:25:39AM +0100, ivast wrote: > Trafil ste do cierneho na prvy krat: > - moj predpoklad o velkosti alokovanej pamate nebol spravny > - kernel zjavne ma nejake mne zatial nezname pravidla, ktore neumoznia > alokovat 2x po sebe 1Gb pamate jednemu procesu. Po zmenseni velkosti > toho stringu tak, aby realne zaberal o nieco menej ako 1GB a spusteni > viacerych instancii, zacalo vsetko fungovat podla ocakavania: > upratovanie v disk cache aj swapping. Mozno budem mimo, ale je mozne, ze mate nastaveny pomer 2GB/2GB userspace a kernel na jeden proces. Kedze daco zabera aj aplikacia, tak ste sa uz do priestoru urceneho pre proces nezmestil. -- Marian From ivast na mail.t-mobile.sk Mon Dec 10 11:37:50 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Mon, 10 Dec 2007 11:37:50 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: <20071210104214.GB20022@stone.cavo.sk> References: <475CFCF8.7050206@mail.t-mobile.sk> <475D0B31.4090009@mail.t-mobile.sk> <475D1423.50700@mail.t-mobile.sk> <20071210104214.GB20022@stone.cavo.sk> Message-ID: <475D16FE.3070900@mail.t-mobile.sk> nie, ulimit unlimited ... teda mozno sa to konfiguruje niekde inde.... ivast > Mozno budem mimo, ale je mozne, ze mate nastaveny pomer 2GB/2GB > userspace a kernel na jeden proces. Kedze daco zabera aj aplikacia, tak > ste sa uz do priestoru urceneho pre proces nezmestil. > From mj na ucw.cz Mon Dec 10 11:50:51 2007 From: mj na ucw.cz (Martin `MJ' Mares) Date: Mon, 10 Dec 2007 11:50:51 +0100 Subject: sprava pamate na linux-2.4 In-Reply-To: <475D1423.50700@mail.t-mobile.sk> References: <475CFCF8.7050206@mail.t-mobile.sk> <475D0B31.4090009@mail.t-mobile.sk> <475D1423.50700@mail.t-mobile.sk> Message-ID: Zdravim! > Trafil ste do cierneho na prvy krat: > - moj predpoklad o velkosti alokovanej pamate nebol spravny > - kernel zjavne ma nejake mne zatial nezname pravidla, ktore neumoznia > alokovat 2x po sebe 1Gb pamate jednemu procesu. Kdepak neznama pravidla -- kdyz mate 4GB adresniho prostoru, 1GB si ukousne kernel a ve zbylych 3GB se usadi binarka, jeji data a dynamicke knihovny, tezko cekat, ze se najde vic souvislych volnych 1GB useku :-) Have a nice fortnight -- Martin `MJ' Mares http://mj.ucw.cz/ Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth And God said: E = 1/2mv^2 - Ze^2/r ...and there *WAS* light! From totojepast na razdva.cz Mon Dec 10 12:48:01 2007 From: totojepast na razdva.cz (totojepast) Date: Mon, 10 Dec 2007 12:48:01 +0100 Subject: problém s ovladači References: Message-ID: <2836$475d2a3d$3e184689$27068@news.chello.cz> píše v diskusním příspěvku news:fbkilj$20sb$1 na news.vol.cz... > zdravím všechny, kdo si to přečtou > mám problém s ovladači u grafické karty... mám integrovaný grafický > čip od nvidia, > bohužel ted nemam jak zjistit přesný typ :( každpádně je to na > základní desce pro nové athlony... když jsem instaloval systém, tak > jsem bez problémů nainstaloval dodávané ovladače. kvůli > nekompatibilitě s titulky ve fable jsem chtěl ovladače updatenout. tam > to začalo. nejenže nové ovladače nenaběhly, jak měly, ale staré > byly definitivně pryč. takže ted mam počítač bez ovladačů > grafické karty. zkoušel jsem několik různých verzí ovladačů, > zkoušel jsem mazat zmínky o nich ve správci zařízení, zkoušel jsem > odinstalovat staré přes ovládací panely, jesti se to nějak > nehádalo... at jsem dělal cokoliv, tak vždy po rebootu neběhne > hláška že systém našel nový hardware, blablabla... kdybste měl > někdo typ, jak to vyřešit, byl bych vám moc vděčný Možná by bylo užitečné spustit nějaké linuxové live CD a podívat se, jaký grafický bude automaticky detekován. Která linuxová live CD distribuce pro desktop umí dobře autodetekovat grafický adaptér? From vaclavik na ujp.cz Mon Dec 10 12:37:56 2007 From: vaclavik na ujp.cz (Juraj Vaclavik) Date: Mon, 10 Dec 2007 12:37:56 +0100 Subject: Kodovanie nazvov suborov In-Reply-To: <475C5C7D.4030209@wardogs.sk> References: <475C5C7D.4030209@wardogs.sk> Message-ID: <200712101237.56332.vaclavik@ujp.cz> Dne neděle 09 prosince 2007 Bruce napsal(a): > Zdravim, > > mam taky jeden problem a vobec netusim, na co sa zamerat. Na serveri mam > ulozeny subor "Obrázok 068.jpg" a ked zadam url do browsera, obrazok sa > nenacita. Problem je v tom, ze nazov suboru sa prehodi na > "Obr%C3%A1zok%20068.jpg", ale apache toto nevie najst a v logu je, ze > subor "Obr\xc3\xa1zok 068.jpg" neexistuje. Predpokladam, ze toto nieje > korektne chovanie a chyba bude niekde u mna na serveri, viete ma niekto > nakopnut? zkusil bych si u dokumentace apače najít AddCharset, resp. AddDefaultCharset - u mě to je v /etc/apache2/mod_mime-defaults.conf. Kromě toho, ač si nabodeníček velice vážím, raději se jim u jmen souborů vyhybám. zdravím jik From qaxi na seznam.cz Mon Dec 10 13:29:30 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Mon, 10 Dec 2007 13:29:30 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw60gc8OtdGku?= Message-ID: <475D312A.6070207@seznam.cz> Zdravím připadl na mne úkol integrovat 130 počítačů s Linuxem do firemní sítě. prozatím máme jak distro vybrané Ubuntu 7.10 s tím, že až vyjde 8.04 LTS tak na nej zupgradujeme a máme 3 roky pokoj ...) Vzhledem k tomu, že jsem vyrostl na RH (žádné RH distro nám na desktop nevyhovuje ....) tak budu v některých věcech trochu tápat. Hledám zdroje (stránky, IRC, mailing listy) s popisem nasazení Linuxu do firemní sítě: - omezení změn nastavení Thunderbirdu, Firefoxu a OpenOffice (už. bude mít přednastavenou cfg.) - omezení změn nastavení Gnome desktopu (už. to nesmí zbořit ...) - vytvoření vlastního (instalačního) repository - PXE boot instalace (vyřešeno pro RH, asi nebude problem ...) - integrování do LDAP sítě ... (autho./authen. vyřešena, je vhodné použít i na jiné použí i na jiné služby?) Náměty a komentáře vítány ... -- Petr Klíma e-mail: qaxi na seznam.cz From totojepast na razdva.cz Mon Dec 10 13:06:26 2007 From: totojepast na razdva.cz (totojepast) Date: Mon, 10 Dec 2007 13:06:26 +0100 Subject: server pro instant messaging v mobilech References: Message-ID: Existují mobilní klienty pro jabber v J2ME či pro smartphony, existoval také produkt cMessenger, který z Jabberu vycházel. http://www.jabber.cz/wiki/Kategorie:Klienti_pro_J2ME Domácí Jabber server je celkem v pohodě. "Miroslav Pragl" píše v diskusním příspěvku news:mailman.136.1196677556.3660.linux na linux.cz... > ahoj, > po problemech yamiga, chatnu a dalsich zacinam pomalu premyslet ze bych si > nainstaloval IM server doma nebo se pridam k nekomu kdo se o neco > podobneho snazi. > > Vite o podobne aktivite v okoli? Priznam se ze o teto problematice vim prd > ale principielne se nemuze prilis lisit od jabber (jen jiny protokol a www > rozhrani). ----- http://usenetove.koukat.cz/ From jan-kovar na meggle.cz Mon Dec 10 13:42:55 2007 From: jan-kovar na meggle.cz (=?iso-8859-2?B?S2924fggSmFu?=) Date: Mon, 10 Dec 2007 13:42:55 +0100 Subject: Asterisk - propojeni dvou klasickych ustreden pres asterisk Message-ID: <7B92CD4F512D08469E24CCAC7856D4C68CF5B7@phants01.meggle.cz> Dobry den. Nepouzivate prosim nekdo Asterisk? Mam dve pobocky. Jednu v Praze, druhou v Bratislave. V kazde pobocce mam Siemens HiPath, ale ruzne typy a verze. Chci je nejak propojit, abychom nemuseli platit, ze mezinarodni volani. Nemuzu do tech Siemens ustreden koupit SIP kartu, abych je propojil, tak hledam nejake reseni, kterym bych to obesel. Netusite nekdo, jestli by mi pomohl v tomhle Asterisk? V obou ustrednach jsou volne jak analogove, tak ISDN porty. Slo by pridat ke kazde ustredne jeden Asterisk s ISDN nebo analogovou kartou a spojit ustredny pres Asterisk? Predpokladam, ze by uzivatele misto takoveho toho +420 cele cislo volali treba predcisli 99 + linku na protejsi ustredne. Jde neco takoveho udelat? Muzete mi dat pripadne tip, co mam hledat v dokumentaci? Jestli je nejaky termin, ktery se pouziva na to, co chci udelat. Diky moc Honza From karel.dudasek na vghur.army.cz Mon Dec 10 14:58:38 2007 From: karel.dudasek na vghur.army.cz (Karel Dudasek) Date: Mon, 10 Dec 2007 14:58:38 +0100 (CET) Subject: Bus 001 Device 002: ID 4348:5523 In-Reply-To: <47593FCB.2020006@simac.cz> References: <47593FCB.2020006@simac.cz> Message-ID: On Fri, 7 Dec 2007, Pavel Just wrote: > Zdravím > Mám USB-serial konvertor, který se mi v lsusb vypíše jako > Bus 001 Device 002: ID 4348:5523. modprobe usbserial vendor=0x4348 > product=0x5523 > proběhne úspěšně. cu -l /dev/ttyUSB0 funguje, ale seriák mi jeden na 19200 > a nedaří se mi to změnit. Parametr -s xyz cučka nic neřeší. > Jak můžu nastavit rychlost na "seriové" straně ? Podobny problem jsem mel s jinym prevodnikem. Zkuste jiny ovladac pro USB/serial. Viz http://www.dobruska.cz/dudasek/linux/index.php cast SPORTident USB čtecí krabička Karel Dudasek From katerina.bubenickova na plbohnice.cz Mon Dec 10 16:44:45 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Mon, 10 Dec 2007 16:44:45 +0100 Subject: Kodovanie nazvov suborov In-Reply-To: <200712101237.56332.vaclavik@ujp.cz> References: <475C5C7D.4030209@wardogs.sk> <200712101237.56332.vaclavik@ujp.cz> Message-ID: <475D5EED.8090006@plbohnice.cz> Me apache nenzobrazi soubory s diakritikou a mezerou --Katerina Bubenickova From lists.subscriber na pragl.cz Mon Dec 10 15:28:09 2007 From: lists.subscriber na pragl.cz (Miroslav Pragl) Date: Mon, 10 Dec 2007 15:28:09 +0100 Subject: server pro instant messaging v mobilech References: Message-ID: To samozrejme vim, ale vyhoda built-in IM klienta je jeho beh na pozadi a integrace do mob. telefonu (coz je v pripade MT bez OS jedina pouzitelna cesta). Proto bych radeji pouzil to co mam v mobilu. MP > Existují mobilní klienty pro jabber v J2ME či pro smartphony, existoval > také produkt cMessenger, který z Jabberu vycházel. > > http://www.jabber.cz/wiki/Kategorie:Klienti_pro_J2ME From duda na lib.cas.cz Mon Dec 10 16:23:27 2007 From: duda na lib.cas.cz (Martin Duda) Date: Mon, 10 Dec 2007 16:23:27 +0100 Subject: Squid - ukoncovani procesu auth_param Message-ID: <475D59EF.40506@lib.cas.cz> Ahoj, mam otazku...nevite nekdo, zda-li se da zjistit, jak hlavni proces squid-u ukoncuje spustene procesy auth_param? Programuji tady vlastni auth_param modul v jave a problem je, ze kdyz skonci hlavni proces squidu, tak ty moduly bezi dal a neukonci se a zacnou konzumovat 100% procesoroveho casu. Stahnul jsem si knihovny sun.misc.Signal a sun.misc.SignalHandler abych byl schopen zachytavat signaly, ale ani INT, TERM, USR2 atd. zrejme hlavni proces neposila. Kdyz ten modul spustim rucne z prikazove radky a poslu mu treba SIGINT, tak ho pekne zachyti a ukonci se...tak nevim... Diky predem za kazdou radu :) From liko na wardogs.sk Mon Dec 10 16:38:36 2007 From: liko na wardogs.sk (Bruce) Date: Mon, 10 Dec 2007 16:38:36 +0100 Subject: Kodovanie nazvov suborov In-Reply-To: <200712101237.56332.vaclavik@ujp.cz> References: <475C5C7D.4030209@wardogs.sk> <200712101237.56332.vaclavik@ujp.cz> Message-ID: <475D5D7C.8080109@wardogs.sk> Juraj Vaclavik wrote: > zkusil bych si u dokumentace apače najít AddCharset, resp. AddDefaultCharset - > u mě to je v /etc/apache2/mod_mime-defaults.conf. Kromě toho, ač si > nabodeníček velice vážím, raději se jim u jmen souborů vyhybám. > > zdravím > > jik > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux Na riesenie som stale neprisiel, AddDefaultCharset len sposobi, ze apache nastavi hlavicke conent-type dane kodovanie. Neviem vobec co je #c3a1 za znak (zrejme cisto praca browsera), ale ak v prehliadaci zadam namiesto dlheho "a" znak %e1, tak mi to nacita korektne. Firefox toto defaultne prehodi, IE a Opera ale posielaju #c3a1, konqueror tiez funguje korektne. Riesenim by sice teoreticky mohlo byt mod_rewrite a znaky "opravovat", ale nieje to uplne ono. Testoval som toto na dvoch serveroch inych spolocnosti a chovanie je identicke, takze to budem povazovat za standardnu feraturu a nie chybu na mojej strane :) PS: dany web robil tazky amater (napr. 1,5MB jpeg nacitava a zmensuje v html a podobne), ale u takychto pripadov sa clovek nauci celkom dost veci, ked sa s tym musi babrat a zistovat :) Bruce From karel.dudasek na vghur.army.cz Mon Dec 10 17:00:21 2007 From: karel.dudasek na vghur.army.cz (Karel Dudasek) Date: Mon, 10 Dec 2007 17:00:21 +0100 (CET) Subject: Kodovanie nazvov suborov In-Reply-To: <475D5D7C.8080109@wardogs.sk> References: <475C5C7D.4030209@wardogs.sk> <200712101237.56332.vaclavik@ujp.cz> <475D5D7C.8080109@wardogs.sk> Message-ID: On Mon, 10 Dec 2007, Bruce wrote: > Na riesenie som stale neprisiel, AddDefaultCharset len sposobi, ze > apache nastavi hlavicke conent-type dane kodovanie. Neviem vobec co je > #c3a1 za znak (zrejme cisto praca browsera), ale ak v prehliadaci zadam > namiesto dlheho "a" znak %e1, tak mi to nacita korektne. Firefox toto > defaultne prehodi, IE a Opera ale posielaju #c3a1, konqueror tiez > funguje korektne. Riesenim by sice teoreticky mohlo byt mod_rewrite a > znaky "opravovat", ale nieje to uplne ono. > > Testoval som toto na dvoch serveroch inych spolocnosti a chovanie je > identicke, takze to budem povazovat za standardnu feraturu a nie chybu > na mojej strane :) > > PS: dany web robil tazky amater (napr. 1,5MB jpeg nacitava a zmensuje v > html a podobne), ale u takychto pripadov sa clovek nauci celkom dost > veci, ked sa s tym musi babrat a zistovat :) Nemate nekde nastaveno, aby posilal URL v UTF? Karel Dudasek From mj na ucw.cz Mon Dec 10 17:06:28 2007 From: mj na ucw.cz (Martin `MJ' Mares) Date: Mon, 10 Dec 2007 17:06:28 +0100 Subject: Kodovanie nazvov suborov In-Reply-To: <475D5D7C.8080109@wardogs.sk> References: <475C5C7D.4030209@wardogs.sk> <200712101237.56332.vaclavik@ujp.cz> <475D5D7C.8080109@wardogs.sk> Message-ID: Zdravim! > Na riesenie som stale neprisiel, AddDefaultCharset len sposobi, ze > apache nastavi hlavicke conent-type dane kodovanie. Neviem vobec co je > #c3a1 za znak (zrejme cisto praca browsera), ale ak v prehliadaci zadam > namiesto dlheho "a" znak %e1, tak mi to nacita korektne. Firefox toto > defaultne prehodi, IE a Opera ale posielaju #c3a1, konqueror tiez > funguje korektne. Riesenim by sice teoreticky mohlo byt mod_rewrite a > znaky "opravovat", ale nieje to uplne ono. V URL nemaji znaky s akcenty co delat, smi se tam vyskytovat pouze znaky z ASCII. Pokud nekdo napise do prohlizece URL s non-ASCII znaky, pak jejich interpretace a preklad na korektni URL je zalezitosti konkretniho prohlizece a tezko cekat, ze to budou vsechny delat stejne. (Hint: nedelaji :) ) Have a nice fortnight -- Martin `MJ' Mares http://mj.ucw.cz/ Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth "In accord to UNIX philosophy, PERL gives you enough rope to hang yourself." -- Larry Wall From dast na panelnet.cz Mon Dec 10 17:52:37 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 10 Dec 2007 17:52:37 +0100 Subject: Asterisk - propojeni dvou klasickych ustreden pres asterisk In-Reply-To: <7B92CD4F512D08469E24CCAC7856D4C68CF5B7@phants01.meggle.cz> References: <7B92CD4F512D08469E24CCAC7856D4C68CF5B7@phants01.meggle.cz> Message-ID: <20071210165237.GA23170@panelnet.cz> On Mon, Dec 10, 2007 at 01:42:55PM +0100, Kovář Jan wrote: > Dobry den. > > Nepouzivate prosim nekdo Asterisk? Mam dve pobocky. Jednu v Praze, > druhou v Bratislave. V kazde pobocce mam Siemens HiPath, ale ruzne > typy a verze. Chci je nejak propojit, abychom nemuseli platit, ze > mezinarodni volani. Nemuzu do tech Siemens ustreden koupit SIP kartu, > abych je propojil, tak hledam nejake reseni, kterym bych to obesel. > Netusite nekdo, jestli by mi pomohl v tomhle Asterisk? V obou > ustrednach jsou volne jak analogove, tak ISDN porty. Slo by pridat ke > kazde ustredne jeden Asterisk s ISDN nebo analogovou kartou a spojit > ustredny pres Asterisk? Predpokladam, ze by uzivatele misto takoveho > toho +420 cele cislo volali treba predcisli 99 + linku na protejsi > ustredne. > Jde neco takoveho udelat? Muzete mi dat pripadne tip, co mam hledat v > dokumentaci? Jestli je nejaky termin, ktery se pouziva na to, co chci > udelat. > Vystrel do tmy: Kdysy jsem propojoval dva asterisky pres internet pomoci protokolu IAX. Fungovalo bez problemu. Nakonec firma koupila sluzbu od nejakeho voip a od te doby jsem na * nesahl. -- Dalibor Straka From pali na tmapy.cz Mon Dec 10 18:36:14 2007 From: pali na tmapy.cz (Pavel Lisy) Date: Mon, 10 Dec 2007 18:36:14 +0100 Subject: Ubuntu ve =?ISO-8859-1?Q?firemn=ED?= =?ISO-8859-1?Q?_s=EDti=2E?= In-Reply-To: <475D312A.6070207@seznam.cz> References: <475D312A.6070207@seznam.cz> Message-ID: <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> "Petr \"Qaxi\" Klíma" píše v Po 10. 12. 2007 v 13:29 +0100: > Zdravím > > připadl na mne úkol integrovat 130 počítačů s Linuxem do firemní sítě. > > prozatím máme jak distro vybrané Ubuntu 7.10 s tím, že až vyjde 8.04 LTS > tak na nej zupgradujeme a máme 3 roky pokoj ...) > > Vzhledem k tomu, že jsem vyrostl na RH (žádné RH distro nám na desktop > nevyhovuje ....) tak budu v některých věcech trochu tápat. A co CentOS 5.1? Ten uz je myslim pro desktop docela vhodny. Nebo co by vam v nem chybelo? Pavel From max na czerny.cz Mon Dec 10 18:24:06 2007 From: max na czerny.cz (Maxim Cerny) Date: Mon, 10 Dec 2007 18:24:06 +0100 Subject: Mala krabicka jako vlastni router s linuxem Message-ID: <475D7636.8010008@czerny.cz> Dobry den, nevite nekdo, zda se nekde prodava pc poskladane do male krabicky velikosti nejakeho cinskeho routeru? Hledal jsem, ale nasel jsem jen Mikrotik, ktery ma moc nizke parametry. MiniPC by melo mit alespon CPU 400 Mhz, RAM alespon 128, misto pro 2,5'' pevny disk a 2x LAN. Je toto mozne vubec nekde sehnat? M. Cerny From petr.klima na sobriety.cz Mon Dec 10 19:27:16 2007 From: petr.klima na sobriety.cz (=?ISO-8859-2?Q?Petr_Kl=EDma?=) Date: Mon, 10 Dec 2007 19:27:16 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <475D7636.8010008@czerny.cz> References: <475D7636.8010008@czerny.cz> Message-ID: <475D8504.10308@sobriety.cz> MHz vam o vykonu rekne hodne malo, lakat zakazniky na MHz uz nezkousi ani Intel ;-) Ale muzete zkusit ALIX - pcengines.ch - jsou tam i odkazy na ceske prodejce. Pokud zabrousite na Mini-ITX desky, muzete to strcit do krabicky od www.emko.cz. A muzete taky zkusit VIA EPIA platformu - vyssi vykon, stejna velikost. Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From tomas na ecomp.eu Mon Dec 10 20:49:36 2007 From: tomas na ecomp.eu (Tomas Cerny) Date: Mon, 10 Dec 2007 20:49:36 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <475D8504.10308@sobriety.cz> References: <475D7636.8010008@czerny.cz> <475D8504.10308@sobriety.cz> Message-ID: <475D9850.7090201@ecomp.eu> VIA EPIA je draha a malo vykonna, ja mam vyzkouseno intel LITTEL VALLEY, je to deska i procesorem. Je tam Celeron 1,3GHz, 1x DDR2 pametovej slot, 1 kanal IDE, 1x 100Mbit LAN a 1x PCI. Vejde se to do beden od EMKA, stoji to par stovek a vykonove je to mnohem vejs nez EPIA. Jedinym problemem je doplnkovy napajeni procesrou, to v EMKOvejch bednach chybi a clovek musi trosku zabastlit. From reklam na biyopark.com Mon Dec 10 20:59:15 2007 From: reklam na biyopark.com (reklam na biyopark.com) Date: Mon, 10 Dec 2007 21:59:15 +0200 Subject: =?iso-8859-9?B?R2XnIEthbG1hZGFuIEdlbucgS2Fs/W4=?= Message-ID: <1d6e6234874b235a48c5cd762844445c@biyopark.com> BIYOPARK BEAUTY, modern teknolojileri, kullandigi dogal urunler ve Turkiye'de ilk kez uyguladigi yontemler ile cilt ve vucut estetigi alaninda hizmet vererek; musterilerinin, zamana meydan okumalarini, d?ş gorunume guvenen, mutlu ve yasamin tum guzelliklerinin tadina varan bireyler olmalarini saglamayi amacla- maktadir. iletisim : http://www.biyopark.com.tr/iletisim.htm biyopark beauty sevketiye mh. Tayyereci Nuri sk. Sutunlu Konak Apt. 1/A Daire:4 Yesilkoy / Istanbul tel : (212) 573 50 45 - 65 From dast na panelnet.cz Mon Dec 10 22:42:24 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 10 Dec 2007 22:42:24 +0100 Subject: Swap a MD raid In-Reply-To: References: Message-ID: <20071210214224.GA25313@panelnet.cz> Ahoj, On Sun, Dec 09, 2007 at 10:08:17PM +0100, Jan Houstek wrote: > Zdravim. > > Zkoumal jste nekdo, zda je s 2.6 kernelem bezpecne pouzit swap nad > software raid realizovanym klasickym md driverem? V tom smyslu, ze > odswapovani nevyzaduje dalsi alokaci fyzicke pameti. > Ve 2.4 existuje deadlock a ve 2.6 ne. Ve zdrojacich 2.6 neni alokace, ktera by ho mohla zpusobit. > Naposledy jsem se ve vnitrnostech linuxoveho VM vyznal na sklonku rady 2.2, > pokud jste to uz nekdo zkoumal nebo mate relevantni odkaz, usetrite mi > spoustu casu. > 2.2 vubec neznam. -- Dalibor Straka From kas na fi.muni.cz Mon Dec 10 23:10:02 2007 From: kas na fi.muni.cz (Jan Kasprzak) Date: Mon, 10 Dec 2007 23:10:02 +0100 Subject: XRandR a fullscreen aplikace (mplayer, evince) Message-ID: <20071210221002.GA12314@fi.muni.cz> Dobry den, pouzivate nekdo XRandR na notebooku? Jak vam tam funguje urcovani toho jak velke ma byt okno fullscreen aplikace? Mam notebook ktery ma nativni rozliseni 1280x800, coz pro veci jako je projektor je nepouzitelne, protoze typicky projektor ma pomer stran 1.3333, zatimco ja mam 1.6. Jedina moznost jak na Fedore 8 zprovoznit vic obrazovek je XRandR (Zaphod mod neni v ATI driverech Fedory 8 podporovany). Tedy jsem zprovoznil xrandr (na rozdil od Zaphod modu se toto obejde bez restartu X i bez rebootu pocitace - hura!). Ale ted je otazka, jak vysvetlit aplikacim, kdy je chci ve fullscreen rezimu videt "jen" pres cely projektor (800x600) a kdy i pres cely displej (1280x1024). Konkretne mi jde o mplayer a evince. U evince jsem mel castecny uspech: zjistil jsem, ze kdy jsem v "clone" modu (projektor je jen podmnozinou displeje), tak nejsem schopen udelat fullscreen na mensi obrazovce. Kdyz udelam projektor jako --right-of LVDS a pretahnu okno evince na obrazovku projektoru, tak po F5 dostanu to co ocekavam, tj. fullscreen okno na 800x600. Akorat pro prednaseni bych radeji videl i nahled na displeji, coz pri --right-of nelze. Naproti tomu mplayer je uplne beznadejny. I kdyz okno pretahnu na mensi obrazovku, tak fullscreen (a bohuzel i pomer stran) se pocitaji podle vetsi obrazovky. Kdyz zkusim clone mod, tak se fullscreen pocita podle vetsi obrazovky, ale pomer stran je aspon dobre. Pri --right-of a mplayer -vo xv se dokonce pri posunovani okna zobrazi overlay na te obrazovce, na ktere je vetsi cast okna mplayeru. Pri clone modu je overlay vzdy na displeji a na projektoru je tmave okno. Jeste jsem zkousel -vo gl, ktery v clone modu zobrazuje obraz na obou obrazovkach, zatimco pri --right-of nezobrazuje ani na jedne :-( Funguje vam nekomu evince a mplayer v clone rezimu dvou nestejne velkych obrazovek jako fullscreen korektne? Diky, -Y. -- | Jan "Yenya" Kasprzak | | GPG: ID 1024/D3498839 Fingerprint 0D99A7FB206605D7 8B35FCDE05B18A5E | | http://www.fi.muni.cz/~kas/ Journal: http://www.fi.muni.cz/~kas/blog/ | >> If you find yourself arguing with Alan Cox, you?re _probably_ wrong. << >> --James Morris in "How and Why You Should Become a Kernel Hacker" << From dejfson na gmail.com Tue Dec 11 00:47:54 2007 From: dejfson na gmail.com (dejfson) Date: Tue, 11 Dec 2007 00:47:54 +0100 Subject: openssh a kerberos4 authentication Message-ID: Zdravim mohl by mi prosim nekdo poradit jak rozchodit openssh s kerberos4 autentizaci? Mam nainstalovany kerberos4 klient, dostavam v poradku tickety. Potreboval bych rozchodit openssh s protokolem SSH1, jenomze at delam co delam, nechce mi provest autorizaci kerberosem a tvdosijne nabizi pouze password. From dejfson na gmail.com Tue Dec 11 00:53:24 2007 From: dejfson na gmail.com (dejfson) Date: Tue, 11 Dec 2007 00:53:24 +0100 Subject: Fwd: openssh a kerberos4 authentication In-Reply-To: References: Message-ID: sem se nejak uklepl jeste jsem to nestacil dopsat..... zkousel jsem jak openssh_4.3 tak nejnovejsi 4.7, vysledek je pokazde stejny. pro SSH1 pouze password, pro SSH2 funguje GSSAPI ale autorizace neprobehne s nejakou bizardni chybou. Hledal jsem jak jsou nastavene nase servery a nasel jsem ze pouzivaji SSH1 a krb4. pouzivam gentoo, mam USE = kerberos krb4 mam nainstalovany mit-krb5 ---------------------- konfigurak ssh: Host * ForwardAgent no ForwardX11 yes # RhostsRSAAuthentication no # RSAAuthentication yes PasswordAuthentication yes HostbasedAuthentication no GSSAPIAuthentication yes # BatchMode no # CheckHostIP yes # AddressFamily any # ConnectTimeout 0 # StrictHostKeyChecking ask # IdentityFile ~/.ssh/identity # IdentityFile ~/.ssh/id_rsa # IdentityFile ~/.ssh/id_dsa # Port 22 Protocol 1,2 # Cipher 3des # Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc # EscapeChar ~ Tunnel yes # TunnelDevice any:any # PermitLocalCommand no ----------------------------------------------------- a v logu dostanu pouze tohle: fooker na sundra:~$ ssh -v -v -v lxplus.cern.ch OpenSSH_4.3p2, OpenSSL 0.9.8g 19 Oct 2007 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to lxplus.cern.ch [137.138.5.232] port 22. debug1: Connection established. debug1: identity file /home/belohrad/.ssh/identity type -1 debug1: identity file /home/belohrad/.ssh/id_rsa type -1 debug1: identity file /home/belohrad/.ssh/id_dsa type -1 debug1: Remote protocol version 1.99, remote software version OpenSSH_4.3p2- 4.cern-hpn-CERN-4.3p2-4.cern debug1: match: OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern pat OpenSSH* debug1: Local version string SSH-1.5-OpenSSH_4.3p2 debug2: fd 3 setting O_NONBLOCK debug1: Waiting for server public key. debug1: Received server public key (768 bits) and host key (1024 bits). debug3: check_host_in_hostfile: filename /home/belohrad/.ssh/known_hosts debug3: check_host_in_hostfile: match line 14 debug3: check_host_in_hostfile: filename /home/belohrad/.ssh/known_hosts debug3: check_host_in_hostfile: match line 18 debug1: Host 'lxplus.cern.ch' is known and matches the RSA1 host key. debug1: Found key in /home/belohrad/.ssh/known_hosts:14 debug1: Encryption type: 3des debug1: Sent encrypted session key. debug2: cipher_init: set keylen (16 -> 32) debug2: cipher_init: set keylen (16 -> 32) debug1: Installing crc compensation attack detector. debug1: Received encrypted confirmation. Permission denied. ----------------------------------------------------- kdyz to provedu z jednoho z internich severu,autentizace probehne takto: [lxplus241] /etc > ssh -v -v -v pslinux1 OpenSSH_4.3p2-4.cern-hpn, OpenSSL 0.9.7a Feb 19 2003 ssh(10953) debug1: Reading configuration data /etc/ssh/ssh_config ssh(10953) debug1: Applying options for * ssh(10953) debug2: ssh_connect: needpriv 0 ssh(10953) debug1: Connecting to pslinux1 [137.138.167.9] port 22. ssh(10953) debug1: Connection established. ssh(10953) debug1: identity file /afs/cern.ch/user/b/belohrad/.ssh/identity type -1 ssh(10953) debug1: identity file /afs/cern.ch/user/b/belohrad/.ssh/id_rsa type -1 ssh(10953) debug1: identity file /afs/cern.ch/user/b/belohrad/.ssh/id_dsa type -1 ssh(10953) debug1: Remote protocol version 1.99, remote software version OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern ssh(10953) debug1: match: OpenSSH_4.3p2-4.cern-hpn-CERN-4.3p2-4.cern pat OpenSSH* ssh(10953) debug1: Local version string SSH-1.5-OpenSSH_4.3p2-4.cern-hpn ssh(10953) debug2: fd 3 setting O_NONBLOCK ssh(10953) debug1: Waiting for server public key. ssh(10953) debug1: Received server public key (768 bits) and host key (2048 bits). ssh(10953) debug3: check_host_in_hostfile: filename /afs/cern.ch/user/b/belohrad/.ssh/known_hosts ssh(10953) debug3: check_host_in_hostfile: match line 3 ssh(10953) debug3: check_host_in_hostfile: filename /afs/cern.ch/user/b/belohrad/.ssh/known_hosts ssh(10953) debug3: check_host_in_hostfile: match line 4 ssh(10953) debug1: Host 'pslinux1' is known and matches the RSA1 host key. ssh(10953) debug1: Found key in /afs/cern.ch/user/b/belohrad/.ssh/known_hosts:3 ssh(10953) debug1: Encryption type: 3des ssh(10953) debug1: Sent encrypted session key. ssh(10953) debug2: cipher_init: set keylen (16 -> 32) ssh(10953) debug2: cipher_init: set keylen (16 -> 32) ssh(10953) debug1: Installing crc compensation attack detector. ssh(10953) debug1: Received encrypted confirmation. ssh(10953) debug1: Trying Kerberos v5 authentication. ssh(10953) debug3: Trying to reverse map address 137.138.167.9. ssh(10953) debug1: Kerberos v5 authentication failed. ssh(10953) debug1: Trying Kerberos v4 authentication. ssh(10953) debug1: Kerberos v4 authentication accepted. ssh(10953) debug1: Kerberos v4 challenge successful. ssh(10953) debug1: Kerberos v5 TGT forwarding failed. ssh(10953) debug1: Kerberos v4 TGT forwarded (belohrad na CERN.CH). ssh(10953) debug1: AFS token for cell cern.ch forwarded. ssh(10953) debug1: Requesting pty. ssh(10953) debug3: tty_make_modes: ospeed 38400 ssh(10953) debug3: tty_make_modes: ispeed 38400 ssh(10953) debug3: tty_make_modes: 1 3 ssh(10953) debug3: tty_make_modes: 2 28 ssh(10953) debug3: tty_make_modes: 3 8 ssh(10953) debug3: tty_make_modes: 4 21 ssh(10953) debug3: tty_make_modes: 5 4 ssh(10953) debug3: tty_make_modes: 6 0 ssh(10953) debug3: tty_make_modes: 7 0 ssh(10953) debug3: tty_make_modes: 8 17 ssh(10953) debug3: tty_make_modes: 9 19 ssh(10953) debug3: tty_make_modes: 10 26 ssh(10953) debug3: tty_make_modes: 12 18 ssh(10953) debug3: tty_make_modes: 13 23 ssh(10953) debug3: tty_make_modes: 14 22 ssh(10953) debug3: tty_make_modes: 18 15 ssh(10953) debug3: tty_make_modes: 30 0 ssh(10953) debug3: tty_make_modes: 31 0 ssh(10953) debug3: tty_make_modes: 32 0 ssh(10953) debug3: tty_make_modes: 33 0 ssh(10953) debug3: tty_make_modes: 34 0 ssh(10953) debug3: tty_make_modes: 35 0 ssh(10953) debug3: tty_make_modes: 36 1 ssh(10953) debug3: tty_make_modes: 37 0 ssh(10953) debug3: tty_make_modes: 38 0 ssh(10953) debug3: tty_make_modes: 39 0 ssh(10953) debug3: tty_make_modes: 40 0 ssh(10953) debug3: tty_make_modes: 41 0 ssh(10953) debug3: tty_make_modes: 50 1 ssh(10953) debug3: tty_make_modes: 51 1 ssh(10953) debug3: tty_make_modes: 52 0 ssh(10953) debug3: tty_make_modes: 53 1 ssh(10953) debug3: tty_make_modes: 54 1 ssh(10953) debug3: tty_make_modes: 55 1 ssh(10953) debug3: tty_make_modes: 56 0 ssh(10953) debug3: tty_make_modes: 57 0 ssh(10953) debug3: tty_make_modes: 58 0 ssh(10953) debug3: tty_make_modes: 59 1 ssh(10953) debug3: tty_make_modes: 60 1 ssh(10953) debug3: tty_make_modes: 61 1 ssh(10953) debug3: tty_make_modes: 62 0 ssh(10953) debug3: tty_make_modes: 70 1 ssh(10953) debug3: tty_make_modes: 71 0 ssh(10953) debug3: tty_make_modes: 72 1 ssh(10953) debug3: tty_make_modes: 73 0 ssh(10953) debug3: tty_make_modes: 74 0 ssh(10953) debug3: tty_make_modes: 75 0 ssh(10953) debug3: tty_make_modes: 90 1 ssh(10953) debug3: tty_make_modes: 91 1 ssh(10953) debug3: tty_make_modes: 92 0 ssh(10953) debug3: tty_make_modes: 93 0 ssh(10953) debug2: x11_get_proto: /usr/bin/X11/xauth list lxplus241.cern.ch:37.0 2>/dev/null ssh(10953) debug1: Requesting X11 forwarding with authentication spoofing. ssh(10953) debug2: fd 3 setting TCP_NODELAY ssh(10953) debug1: Requesting shell. ssh(10953) debug1: Entering interactive session. ssh(10953) debug2: fd 0 setting O_NONBLOCK ssh(10953) debug1: fd 0 clearing O_NONBLOCK Last login: Mon Dec 10 23:29:42 2007 from lxplus213.cern.ch ================================================================ CS-CCR-DEV1 - 0874 R-0012 RA5616 - ab/co software development ================================================================ HP ProLiant DL380 G5 CZC65066J6 SMP 4x Intel(R) Xeon(R) CPU 5150 @ 2.66GHz 2666MHz (4096KB cache) 6912 MB memory Linux i686 2.6.9-55.0.12.EL.cernsmp (AFS: i386_linux26) Scientific Linux CERN SLC release 4.6 (Beryllium) ================================================================ --------------- v mem pripade je videt ze openssh nechce pouzit krb5 a krb4. nevite nekdo proc? diky db. From qaxi na seznam.cz Tue Dec 11 07:41:18 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Tue, 11 Dec 2007 07:41:18 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw60gc8OtdGku?= In-Reply-To: <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> References: <475D312A.6070207@seznam.cz> <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> Message-ID: <475E310E.2080802@seznam.cz> Pavel Lisy napsal(a): > "Petr \"Qaxi\" Klíma" píše v Po 10. 12. 2007 v 13:29 +0100: > >> Zdravím >> >> připadl na mne úkol integrovat 130 počítačů s Linuxem do firemní sítě. >> >> prozatím máme jak distro vybrané Ubuntu 7.10 s tím, že až vyjde 8.04 LTS >> tak na nej zupgradujeme a máme 3 roky pokoj ...) >> >> Vzhledem k tomu, že jsem vyrostl na RH (žádné RH distro nám na desktop >> nevyhovuje ....) tak budu v některých věcech trochu tápat. >> > > A co CentOS 5.1? Ten uz je myslim pro desktop docela vhodny. Nebo co by > vam v nem chybelo? > > Pavel > > Sorry, ale RHEL 5.1 je jako vsechny RHEL distro na desktopu nepouzitelny FF 1.5, TB1.5, OO 2.0.4 Ubuntu např. používá OO branch od Novell takže je tam větší šance na kompatibilitu s VBA a makrama . -- Petr Klíma e-mail: qaxi na seznam.cz From dast na panelnet.cz Tue Dec 11 09:09:11 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Tue, 11 Dec 2007 09:09:11 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <475D7636.8010008@czerny.cz> References: <475D7636.8010008@czerny.cz> Message-ID: <20071211080911.GA875@panelnet.cz> On Mon, Dec 10, 2007 at 06:24:06PM +0100, Maxim Cerny wrote: > Dobry den, > > nevite nekdo, zda se nekde prodava pc poskladane do male krabicky > velikosti nejakeho cinskeho routeru? > > Hledal jsem, ale nasel jsem jen Mikrotik, ktery ma moc nizke parametry. > MiniPC by melo mit alespon CPU 400 Mhz, RAM alespon 128, misto pro 2,5'' > pevny disk a 2x LAN. > > Je toto mozne vubec nekde sehnat? > A co od te krabicky chcete - Gbit?, pocet portu, jen router nebo i traffic shaping?, spotreba?, velikost?... Nejaky mikrotik na 400MHz mam, je tam procesor ARM, bezi na tom 10Mbit a 14 klientu vcetne shapingu. Zatizeni 1%. -- Dalibor Straka From m.donicova na gmail.com Tue Dec 11 09:06:25 2007 From: m.donicova na gmail.com (mardon) Date: Tue, 11 Dec 2007 00:06:25 -0800 (PST) Subject: servis24.cz a squid Message-ID: Ve firemni siti pouzivame pro pristup k internetu proxy server squid (squid/3.0.RC1-20071025 Na CentOs 5.0) . Od minuleho tydne mame ale problemy s pristupem ke sluzbe www.servis24.cz a to takovy , ze opakovane mi hlasi The requested URL could not be retrieved -------------------------------------------------------------------------------- While trying to retrieve the URL: http://www.servis24.cz/ The following error was encountered: Unable to determine IP address from host name for www.servis24.cz The dnsserver returned: Refused: The name server refuses to perform the specified operation. This means that: The cache was not able to resolve the hostname presented in the URL. Check if the address is correct. Your cache administrator is webmaster. pote zase nekolikrat najede a pak zase ne. Zavada v DNS se mi nezda, nebot takto mi to zlobi jen u servis24.cz. Muzete mi nekdo poradit cim by to mohlo byt? Dik predem From ivast na mail.t-mobile.sk Tue Dec 11 09:18:35 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Tue, 11 Dec 2007 09:18:35 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <475D7636.8010008@czerny.cz> References: <475D7636.8010008@czerny.cz> Message-ID: <475E47DB.30507@mail.t-mobile.sk> DD, toto aj mna zaujima a otazku by som este rozsiril: 1. malo by to byt riesenie bez bastlenia, tzn komplet v krabici 2. pasivne chladene 3. indoor nemusi tam byt magneticky disk a namiesto LAN by ma potesil WLAN alebo minipci slot. Maxim Cerny wrote: > nevite nekdo, zda se nekde prodava pc poskladane do male krabicky > velikosti nejakeho cinskeho routeru? > > From petr.klima na sobriety.cz Tue Dec 11 09:39:12 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Tue, 11 Dec 2007 09:39:12 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <475E47DB.30507@mail.t-mobile.sk> References: <475D7636.8010008@czerny.cz> <475E47DB.30507@mail.t-mobile.sk> Message-ID: <475E4CB0.5010000@sobriety.cz> ivast wrote: > DD, toto aj mna zaujima a otazku by som este rozsiril: > > 1. malo by to byt riesenie bez bastlenia, tzn komplet v krabici > 2. pasivne chladene > 3. indoor > > nemusi tam byt magneticky disk a namiesto LAN by ma potesil WLAN alebo > minipci slot. ALIX - pcengines.ch (vyberte si ceskeho prodejce), pripadne zminovane Routerboardy. Prodavaji vse potrebne a pokud je slozeni dohromady prilis velke bastleni, za 1500 vam to zkompletuju :-) Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From dtoman na fortech.cz Tue Dec 11 09:38:51 2007 From: dtoman na fortech.cz (Dalibor Toman) Date: Tue, 11 Dec 2007 09:38:51 +0100 Subject: servis24.cz a squid References: Message-ID: <0f6801c83bd1$41b78910$28010101@fortech.local> On Tuesday, December 11, 2007 9:06 AM , mardon wrote: > Ve firemni siti pouzivame pro pristup k internetu proxy server squid > (squid/3.0.RC1-20071025 Na CentOs 5.0) . Od minuleho tydne mame ale > problemy s pristupem ke sluzbe www.servis24.cz a to takovy , ze > opakovane mi hlasi > > The requested URL could not be retrieved > > -------------------------------------------------------------------------------- > > While trying to retrieve the URL: http://www.servis24.cz/ > > The following error was encountered: > > Unable to determine IP address from host name for www.servis24.cz > The dnsserver returned: > > Refused: The name server refuses to perform the specified operation. > This means that: > > The cache was not able to resolve the hostname presented in the > URL. > Check if the address is correct. > Your cache administrator is webmaster. > > pote zase nekolikrat najede a pak zase ne. Zavada v DNS se mi nezda, > nebot takto mi to zlobi jen u servis24.cz. Muzete mi nekdo poradit > cim > by to mohlo byt? Dik predem a kontroloval jsi, zda z toho stroje jde skutecne zjistit IP toho WWWcka? podle korenovych DNS pro CZ by mel DNS pro servis24.cz byt servis24.cz. 18000 IN NS nsb.csas.cz. servis24.cz. 18000 IN NS nsd.csas.cz. nsb.csas.cz. 18000 IN A 193.179.187.18 nsd.csas.cz. 18000 IN A 62.40.76.18 ale nas DNS server kesuje: www.servis24.cz. 554 IN NS css1.csas.cz. www.servis24.cz. 554 IN NS css2.csas.cz. ;; ADDITIONAL SECTION: css1.csas.cz. 6891 IN A 194.50.240.64 css2.csas.cz. 6877 IN A 194.50.240.192 cili zrejme uplne jine stroje. Pravdepodobne doslo ke zmene v nastaveni zony a jsme prave uprostred prechodu na nove DNS... jak stare tak nove DNS mi vraceji IP pro www.servis24.cz (ale objevuji se 2 ruzna IP). DNS cssx znaji www.servis24.cz ale domenu servis24.cz hlasi jako neexistujici Nove servery pri dotazu na SOA,NS vraci misto pocekavane odpovedi jen ;; QUESTION SECTION: ;servis24.cz. IN NS ;; ANSWER SECTION: servis24.cz. 7200 IN CNAME www.servis24.cz. -- cili ty servery jseou nejak podivne nastavene... D. Toman From mysutka na seznam.cz Tue Dec 11 10:36:45 2007 From: mysutka na seznam.cz (Michal Vojan) Date: Tue, 11 Dec 2007 10:36:45 +0100 Subject: fedora 8 a rozbite fonty Message-ID: Dobry den, provedl jsem upgrade z fedora 7 na 8 a po posledni davce, ktera obsahovala xorg (7.3) mam rozbite fonty. jsou jakoby prerusovane podtrzene, znaky jsou zprava urezane. Musim pouzivat vetsi pismo, abych si neco precetl. Zda se ale,ze problem se ukazuje jen v kde (3.5.8). Ve fvwm jsem to nezaregistroval, nebo jen spusteny xterm mel font take v poradku. Jeste budu zkouset jiny window manager. Zatim jsem nic na webu nenasel. Pokud jste se s takovym problemem nekdo setkal, prosim o info, jak jej odstranit. Diky Michal Vojan From ivast na mail.t-mobile.sk Tue Dec 11 10:47:22 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Tue, 11 Dec 2007 10:47:22 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <475E4CB0.5010000@sobriety.cz> References: <475D7636.8010008@czerny.cz> <475E47DB.30507@mail.t-mobile.sk> <475E4CB0.5010000@sobriety.cz> Message-ID: <475E5CAA.1080601@mail.t-mobile.sk> Ehm, diky. Uz pred tym som pozeral taketo dosticky, ale myslel som si ze budem musiet bastlit krabice a zdroje a podobne. Dokonca tam maju aj nejake slovenske shopy :-). btw pouzivate to niekto aj na inu aplikaciu ako router ? ivast Petr Klíma wrote: > ALIX - pcengines.ch (vyberte si ceskeho prodejce), pripadne zminovane > Routerboardy. Prodavaji vse potrebne a pokud je slozeni dohromady prilis > velke bastleni, za 1500 vam to zkompletuju :-) > > From petr.klima na sobriety.cz Tue Dec 11 11:00:45 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Tue, 11 Dec 2007 11:00:45 +0100 Subject: fedora 8 a rozbite fonty In-Reply-To: References: Message-ID: <475E5FCD.6050702@sobriety.cz> zkusil bych (po zazalohovani) umazat konfiguraci kde v .kde, to obcas dokaze divy... Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From ber na eunet.cz Tue Dec 11 11:00:38 2007 From: ber na eunet.cz (Milan BERKA) Date: Tue, 11 Dec 2007 11:00:38 +0100 Subject: fedora 8 a rozbite fonty In-Reply-To: References: Message-ID: Asi potřeba zapnout vyhlazování... Nejspíše se ztratilo nastavení KDE. MB. Michal Vojan napsal(a): > Dobry den, provedl jsem upgrade z fedora 7 na 8 a po posledni davce, ktera > obsahovala xorg (7.3) mam rozbite fonty. jsou jakoby prerusovane podtrzene, > znaky jsou zprava urezane. Musim pouzivat vetsi pismo, abych si neco > precetl. Zda se ale,ze problem se ukazuje jen v kde (3.5.8). Ve fvwm jsem > to nezaregistroval, nebo jen spusteny xterm mel font take v poradku. Jeste > budu zkouset jiny window manager. Zatim jsem nic na webu nenasel. Pokud > jste se s takovym problemem nekdo setkal, prosim o info, jak jej odstranit. > Diky > Michal Vojan > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From katerina.bubenickova na plbohnice.cz Tue Dec 11 13:27:48 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Tue, 11 Dec 2007 13:27:48 +0100 Subject: groupwise a zobrazovani vlaken v evolution Message-ID: <475E8244.90107@plbohnice.cz> DD, zavadime jako postovni system groupwise, ale narazila jsem na problem nekorektniho zobrazovani vlaken. Klient pro M$ win zobrazuje vlakna spatne (jenom nektere zavislosti), evolution vlakna nezobrazuje, ackoli ma volbu Seskupovat podle vlaken (Ctrl T), vubec na zaskrtnuti volby nereaguje. Z hlavicky zpravy se mi ale zda, ze evolution ma vsechny dostupne udaje - napr.: References: <474C023B.80205 na plbohnice.cz > <6rat15xk7k.ln2 na hubmaier.ceplovi.cz > <47565D5C.8010700 na plbohnice.cz > > <47566674.4070801 na plbohnice.cz > <475694AA.5030808 na plbohnice.cz > <47569822.8050208 na sobriety.cz > <4756AFE3.2020908 na plbohnice.cz > <4756B1CF.9060500 na sobriety.cz > <4757D857.8000700 na plbohnice.cz > <20071206112612.GA12596 na pzkagis.cz > In-Reply-To: <20071206112612.GA12596 na pzkagis.cz > Google me na otazku evolution, tread zavadi jenom tam, kam nechci. Zatim mame postfix, ze ktereho zpravy preposilame do gw, takze si konferenci muzu cist v thunderbirdu pres imap. Nevi nekdo o klientovi, ktery by umel soap a opravdu zobrazoval vlakna? Mam Evolution 2.8.2, pomuze nejaky upgrade? Diky --Katerina Bubenickova From mysutka na seznam.cz Tue Dec 11 12:17:22 2007 From: mysutka na seznam.cz (Michal Vojan) Date: Tue, 11 Dec 2007 12:17:22 +0100 Subject: fedora 8 a rozbite fonty References: <475E5FCD.6050702@sobriety.cz> Message-ID: Tak tohle bohuzel nefunguje. Zkusil jsem na to zalozit noveho uzivatele a je to to same. Podobny kousek jsem musel zkusit uz i jenom s kdmrc, protoze s puvodnim jsem nemohl zmenit tema pro kdm, kdyz tema v konfiguraku uvedene prestalo existovat. :-( Petr Klíma wrote: > zkusil bych (po zazalohovani) umazat konfiguraci kde v .kde, to obcas > dokaze divy... > > Petr > From ok1ced na nagano.cz Tue Dec 11 12:18:07 2007 From: ok1ced na nagano.cz (Josef Štengl) Date: Tue, 11 Dec 2007 12:18:07 +0100 Subject: =?iso-8859-2?Q?probl=E9m_s_ovlada=E8i?= In-Reply-To: <2836$475d2a3d$3e184689$27068@news.chello.cz> References: <2836$475d2a3d$3e184689$27068@news.chello.cz> Message-ID: <20071211111806.GA32500@nagano.cz> Zkoušel jsi lspci -v ? Myslím že chipset s toho půjde vykoukat. Josef On Mon, Dec 10, 2007 at 12:48:01PM +0100, totojepast wrote: > píše v diskusním příspěvku news:fbkilj$20sb$1 na news.vol.cz... > > zdravím všechny, kdo si to přečtou > > mám problém s ovladači u grafické karty... mám integrovaný grafický > > čip od nvidia, > > bohužel ted nemam jak zjistit přesný typ :( každpádně je to na > > základní desce pro nové athlony... když jsem instaloval systém, tak > > jsem bez problémů nainstaloval dodávané ovladače. kvůli > > nekompatibilitě s titulky ve fable jsem chtěl ovladače updatenout. tam > > to začalo. nejenže nové ovladače nenaběhly, jak měly, ale staré > > byly definitivně pryč. takže ted mam počítač bez ovladačů > > grafické karty. zkoušel jsem několik různých verzí ovladačů, > > zkoušel jsem mazat zmínky o nich ve správci zařízení, zkoušel jsem > > odinstalovat staré přes ovládací panely, jesti se to nějak > > nehádalo... at jsem dělal cokoliv, tak vždy po rebootu neběhne > > hláška že systém našel nový hardware, blablabla... kdybste měl > > někdo typ, jak to vyřešit, byl bych vám moc vděčný > > Možná by bylo užitečné spustit nějaké linuxové live CD a podívat se, jaký > grafický bude automaticky detekován. > > Která linuxová live CD distribuce pro desktop umí dobře autodetekovat > grafický adaptér? > > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From mysutka na seznam.cz Tue Dec 11 12:24:13 2007 From: mysutka na seznam.cz (Michal Vojan) Date: Tue, 11 Dec 2007 12:24:13 +0100 Subject: fedora 8 a rozbite fonty References: Message-ID: Tohle jsem take zkousel, ale take bez vyznamu. Pravda, jeste zkusim po zmene provest restart Xorg/KDE. Zvlastni je, ze napr v titulku okna je pismo v poradku. Panel myslim take. Nejhorsi jsou plocha a editacni pole a hlavni/vykreslovaci casti oken (nevim, jak to lepe popsat, mozna canvas?) Michal Milan BERKA wrote: > Asi potřeba zapnout vyhlazování... > Nejspíše se ztratilo nastavení KDE. > > MB. > > > Michal Vojan napsal(a): >> Dobry den, provedl jsem upgrade z fedora 7 na 8 a po posledni davce, >> ktera obsahovala xorg (7.3) mam rozbite fonty. jsou jakoby prerusovane >> podtrzene, znaky jsou zprava urezane. Musim pouzivat vetsi pismo, abych >> si neco precetl. Zda se ale,ze problem se ukazuje jen v kde (3.5.8). Ve >> fvwm jsem to nezaregistroval, nebo jen spusteny xterm mel font take v >> poradku. Jeste budu zkouset jiny window manager. Zatim jsem nic na webu >> nenasel. Pokud jste se s takovym problemem nekdo setkal, prosim o info, >> jak jej odstranit. Diky >> Michal Vojan >> >> _______________________________________________ >> Linux mailing list >> Linux na linux.cz >> http://www.linux.cz/mailman/listinfo/linux >> > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From kolo na albatani.cz Tue Dec 11 12:21:01 2007 From: kolo na albatani.cz (=?ISO-8859-1?Q?V=E1clav_B=EDlek?=) Date: Tue, 11 Dec 2007 12:21:01 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: References: Message-ID: Maxim Cerny napsal(a): > Dobry den, > > nevite nekdo, zda se nekde prodava pc poskladane do male krabicky > velikosti nejakeho cinskeho routeru? > > Hledal jsem, ale nasel jsem jen Mikrotik, ktery ma moc nizke parametry. > MiniPC by melo mit alespon CPU 400 Mhz, RAM alespon 128, misto pro 2,5'' > pevny disk a 2x LAN. > > Je toto mozne vubec nekde sehnat? > > M. Cerny pouzivam toto a jsem spokojen http://asm.inshop.cz/inshop/scripts/detail.asp?ItemID=810296 From duda na lib.cas.cz Tue Dec 11 13:06:33 2007 From: duda na lib.cas.cz (Martin Duda) Date: Tue, 11 Dec 2007 13:06:33 +0100 Subject: Squid - ukoncovani procesu auth_param In-Reply-To: <475D59EF.40506@lib.cas.cz> References: <475D59EF.40506@lib.cas.cz> Message-ID: <475E7D49.1090108@lib.cas.cz> A sam si asi odpovim :) squid zrejme neposila zadny SIG* pouze prerusi rouru do beziciho modulu cimz se vyvola SIGPIPE, takze jsem zachytil v modulu SIGPIPE a tim koncim...zda se to jako ciste reseni... Duda Martin Duda napsal(a): > Ahoj, > > mam otazku...nevite nekdo, zda-li se da zjistit, jak hlavni proces squid-u ukoncuje spustene procesy auth_param? Programuji tady vlastni auth_param modul v jave a problem je, ze kdyz skonci hlavni proces squidu, tak ty moduly bezi dal a neukonci se a zacnou konzumovat 100% procesoroveho casu. Stahnul jsem si knihovny sun.misc.Signal a sun.misc.SignalHandler abych byl schopen zachytavat signaly, ale ani INT, TERM, USR2 atd. zrejme hlavni proces neposila. Kdyz ten modul spustim rucne z prikazove radky a poslu mu treba SIGINT, tak ho pekne zachyti a ukonci se...tak nevim... > > Diky predem za kazdou radu :) > > > From ivast na mail.t-mobile.sk Tue Dec 11 13:18:40 2007 From: ivast na mail.t-mobile.sk (ivast) Date: Tue, 11 Dec 2007 13:18:40 +0100 Subject: groupwise a zobrazovani vlaken v evolution In-Reply-To: <475E8244.90107@plbohnice.cz> References: <475E8244.90107@plbohnice.cz> Message-ID: <475E8020.6010105@mail.t-mobile.sk> Evolution 2.10.1 s exchange konektorom zaraduje do threadov spravne. ivast > Google me na otazku evolution, tread zavadi jenom tam, kam nechci. > > From petr na olsak.net Tue Dec 11 13:34:25 2007 From: petr na olsak.net (Petr Olsak) Date: Tue, 11 Dec 2007 13:34:25 +0100 (CET) Subject: 64bit versus 32bit OS Message-ID: Vazeni, chtel bych zjistit Vas nazor na smysluplnost provozovani 64bitoveho OS na soucasnych desktopech vcetne argumentaci, zkusenosti a souvislosti. V soucasne dobe vpodstate vsechny procesory v bezne prodavanych pocitacich maji 64bit rozsireni. AMD s tim prisli o neco driv (uz pred mnoha lety) a snazi se tuto skutecnost dat patricne najevo, tj. davaji cislo 64 primo do nazvu modelu svych procesoru. Intel s tim pak prisel ponekud opozdene a neni to jejich nejvetsi marketingovy trhak. Naopak, clovek musi pozorne cist podrobnou dokumentaci k procesoru, aby nekde uplne vzadu mezi vsemi ostatnimi rozsirenimi procesoru (a je jich pozehnane) nasel neco jako ET64, vetsinou bez dalsiho komentare. V Linuxu a pri pouzivani beznych linuxovych aplikaci mame diky vyvojarum moznost volby: vyuzit nebo nevyuzit ono 64bit rozsireni procesoru. Vzhledem k tomu, ze je rozumne rozhodnout se pro jedinou variantu (32bit aplikace na 64bit systemu vyzaduji mit duplikovany vsechny so-knihovny, na kterych zavisi, 64bit aplikace na 32bit systemu vubec nebezi), naskyta se otazka: vyplati se skutecne to rozsireni vyuzit a provozovat 64bit OS? Udelal jsem test na svem notebooku (Indel Dual Core), kde jsem do dvou ruznych partitions nainstaloval Gentoo dvakrat: jednou jako x86 a podruhe amd64. (Oj, jak jsou ty nazvy architektur nazorne, clovek okamzite vi, ze to prvni je pro 32bitovy rezim procesoru a to druhe je pro ET64, ze ano. Ale to sem nepatri). Subjektivne v rychlosti provozu nepozoruji zadny rozdil. Program bc mi spocte pi na 3000 desetinnych mist za 14s v rezimu x86 a za 11s pri amd64. Kompilace (gcc) ma jeste nevyraznejsi pomer rychlosti. To tedy neni zadna vyhra. Vubec me to neohromilo. Programy a so-knihovny jsou typicky v 64bitech o 20% vetsi, v RAM pak zabiraji jeste vice mista. Nac je tedy pouzivat? Jen proto, aby to rozsireni procesoru nebylo nevyuzito? Vzdyt desitky dalsich rozsireni dnesnich procesoru vyuziji mozna jen nektere aplikce a mozna jen nekdy, spis ne. Co kdyz mi nekdy bude chybet misto na disku, ktere bych mel, kdybych neistaloval verzi systemu o 20% vetsi? Chapu, ze pokud bych potreboval v programu linearne adresovat pamet vetsi nez 4GB, mam pri pouziti 64bitoveho rozsireni moznost. Ale zatim nevim o aplikaci, ktera takovou vec nutne potrebuje (a pocitace dnes bezne nebyvaji osazeny desitkami GB RAM). Vzpominam na prechod 16bit -> 32bit pred patnacti lety. Tehdy zacalo vznikat mnoho aplikaci, ktere se do 16bit architektury neveslo. Napriklad 16bit TeX (EmTeX pro DOS: tex.exe) musel alokovat sve nejvetsi pole "main-memory" maximalne v jednom 64kB bloku, takze se do toho vesel plainTeX a stary LaTeX2.09 (bez prilisneho mnozstvi balicku), ale novy LaTeX2e mel problemy. Vznikaly ruzne tex386.exe a dalsi zrudy s ruznymi DOSoidnimi rezimy rozsirene pameti, coz byla silenost. Dekujme tedy za tech 32bitu. Dalsi aplikace tehdy take pocitovaly potrebu opustit sveraci kazaju ve forme segment-offset gymnastiky pointeru do pameti. Ale dnes? Potrebuji dnesni aplikace opustit sveraci kazajku ve forme maximalne 4GB linerane adresovane pameti? Mozna nektere velmi specificke, ale ja zde mluvim o beznych aplikacich pro desktop. Tesim se na Vase nazory, zkusenosti, rozbory problemu... Zdravim Petr Olsak From tomi na nomi.cz Tue Dec 11 13:47:35 2007 From: tomi na nomi.cz (=?iso-8859-2?Q?Tom=E1=B9_Janou=B9ek?=) Date: Tue, 11 Dec 2007 13:47:35 +0100 Subject: XRandR a fullscreen aplikace (mplayer, evince) In-Reply-To: <20071210221002.GA12314@fi.muni.cz> References: <20071210221002.GA12314@fi.muni.cz> Message-ID: <20071211124735.GA21112@nomi.cz> Dobrý den, On Mon, Dec 10, 2007 at 11:10:02PM +0100, Jan Kasprzak wrote: > pouzivate nekdo XRandR na notebooku? Jak vam tam funguje urcovani toho jak > velke ma byt okno fullscreen aplikace? V jakém pořadí vám ty displeje příkaz xrandr vypisuje? Mně to vypisuje nejdřív ten externí a pak LCD, a dost aplikací (minimálně teda fluxbox, evince a mplayer) pak při hledání monitoru, na kterém jsou, najdou nejdříve ten menší (v případě projektoru teda). Pokud to teda vypisuje opačně, pak chápu, kde by mohl být problém, a o řešení spíše nevím (tedy, být to pro mě problém, tak s fluxboxem bych si s tím asi nějak poradil, ale obecně nevím). > Naproti tomu mplayer je uplne beznadejny. I kdyz okno pretahnu na > mensi obrazovku, tak fullscreen (a bohuzel i pomer stran) se pocitaji Mně to počítá špatně jen ten poměr stran, a to bychom asi mohli opravit. > podle vetsi obrazovky. Kdyz zkusim clone mod, tak se fullscreen pocita > podle vetsi obrazovky, ale pomer stran je aspon dobre. Pri --right-of > a mplayer -vo xv se dokonce pri posunovani okna zobrazi overlay na te > obrazovce, na ktere je vetsi cast okna mplayeru. Pri clone modu je overlay > vzdy na displeji a na projektoru je tmave okno. Jeste jsem zkousel > -vo gl, ktery v clone modu zobrazuje obraz na obou obrazovkach, > zatimco pri --right-of nezobrazuje ani na jedne :-( Ona většina karet umí ten overlay jen na jednom displeji zaráz. Pokud se viewporty nepřekrývají, tak se driver snaží zobrazovat tam, kde je toho okna víc, pokud ano, musí si jeden vybrat. NVIDIA na to má tuším proměnnou prostředí, ATI snad volbu v xorg.conf, u intelu o ničem nevím. Na druhé straně teda intel defaultně nepoužívá overlay, ale texturovací jednotku a s ní se to zobrazuje na obou. Je možné, že i na vašem HW bude víc Xv adaptérů (viz xvinfo). Kdyby vám to pomohlo, asi bych mohl být zítra mezi druhou a čtvrtou na fakultě k zastižení. S pozdravem, -- Tomáš Janoušek, a.k.a. Liskni_si, http://work.lisk.in/ From ber na eunet.cz Tue Dec 11 14:18:58 2007 From: ber na eunet.cz (Milan BERKA) Date: Tue, 11 Dec 2007 14:18:58 +0100 Subject: Existuje =?UTF-8?B?bsSbY28sIGNvIGJ5IG1pIHBvbW9obG8gb2RzdHJhbml0IA==?= =?UTF-8?B?bmVwb3TFmWVibsOpIGJhbMOtxI1reSB2IHN5c3TDqW11Pw==?= Message-ID: Dobrý den, používám Fedora 8, mám obavu, že se mi po různých upgrade nahromadilo v systému mnoho balíčků, které tam možná nejsou ani potřeba. Potřeboval bych něco, co by mi vypsalo závislosti balíčků v nějakém řetězci, kde bych mohl usoudit, které posloupnosti nejsou potřeba. Jinak funguji tak, že se mi zdá, že něco není potřeba a při odstranění YUMem to vypíše závislosti, které mne přivedou na myšlenku, že toto tedy odstranit nelze... Metoda pokus omyl a to je na dlouho... Dík za nápad. MB. From pali na tmapy.cz Tue Dec 11 14:30:04 2007 From: pali na tmapy.cz (Pavel Lisy) Date: Tue, 11 Dec 2007 14:30:04 +0100 Subject: Existuje =?UTF-8?Q?n=C4=9Bco=2C?= co by mi pomohlo odstranit =?UTF-8?Q?nepot=C5=99ebn=C3=A9?= =?UTF-8?Q?_bal=C3=AD=C4=8Dky?= v =?ISO-8859-1?Q?syst=E9mu=3F?= In-Reply-To: References: Message-ID: <1197379804.9921.20.camel@pali-pc.hk.tmapy.cz> Milan BERKA píše v Út 11. 12. 2007 v 14:18 +0100: > Dobrý den, > používám Fedora 8, mám obavu, že se mi po různých upgrade nahromadilo v > systému mnoho balíčků, které tam možná nejsou ani potřeba. > Potřeboval bych něco, co by mi vypsalo závislosti balíčků v nějakém > řetězci, kde bych mohl usoudit, které posloupnosti nejsou potřeba. > > Jinak funguji tak, že se mi zdá, že něco není potřeba a při odstranění > YUMem to vypíše závislosti, které mne přivedou na myšlenku, že toto tedy > odstranit nelze... Metoda pokus omyl a to je na dlouho... Co třeba yum remove ... Pavel From ber na eunet.cz Tue Dec 11 14:41:48 2007 From: ber na eunet.cz (Milan BERKA) Date: Tue, 11 Dec 2007 14:41:48 +0100 Subject: Existuje =?ISO-8859-2?Q?n=ECco=2C_co_by_mi_pomohlo_?= =?ISO-8859-2?Q?odstranit___nepot=F8ebn=E9_bal=ED=E8ky_v___?= =?ISO-8859-2?Q?syst=E9mu=3F?= In-Reply-To: <1197379804.9921.20.camel@pali-pc.hk.tmapy.cz> References: <1197379804.9921.20.camel@pali-pc.hk.tmapy.cz> Message-ID: No to je právě ten pokus a omyl ... chtěl jsem něco typu bal1 - bal2 - bal3 bal4 bal5 - bal6 - bal7 - bal8 -bal9 vim, že můžu bez problémů remove bal4 bal1 a vim, že nemůžu remove bal6 a ani bal5... MB. Pavel Lisy napsal(a): > Milan BERKA píše v Út 11. 12. 2007 v 14:18 +0100: >> Dobrý den, >> používám Fedora 8, mám obavu, že se mi po různých upgrade nahromadilo v >> systému mnoho balíčků, které tam možná nejsou ani potřeba. >> Potřeboval bych něco, co by mi vypsalo závislosti balíčků v nějakém >> řetězci, kde bych mohl usoudit, které posloupnosti nejsou potřeba. >> >> Jinak funguji tak, že se mi zdá, že něco není potřeba a při odstranění >> YUMem to vypíše závislosti, které mne přivedou na myšlenku, že toto tedy >> odstranit nelze... Metoda pokus omyl a to je na dlouho... > Co třeba > yum remove ... > > Pavel > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From pstehlik na sophics.cz Tue Dec 11 14:23:30 2007 From: pstehlik na sophics.cz (Petr Stehlik) Date: Tue, 11 Dec 2007 14:23:30 +0100 Subject: 64bit versus 32bit OS In-Reply-To: References: Message-ID: <475E8F52.8000906@sophics.cz> Petr Olsak wrote: > Udelal jsem test na svem notebooku (Indel Dual Core) chtelo by to zkusit AMD, ne Indel.. Rika se, ze EM64T zpomaluje, zatimco 64bit u K8 naopak zrychluje (ale to jsem jen slysel, nikdy netestoval, a doma mam vsude 32bit, z lennosti resit pripadne problemy). Petr From petr.klima na sobriety.cz Tue Dec 11 14:58:33 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Tue, 11 Dec 2007 14:58:33 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <475E8F52.8000906@sophics.cz> References: <475E8F52.8000906@sophics.cz> Message-ID: <475E9789.6080001@sobriety.cz> Petr Stehlik wrote: > chtelo by to zkusit AMD, ne Indel.. Rika se, ze EM64T zpomaluje, zatimco > 64bit u K8 naopak zrychluje (ale to jsem jen slysel, nikdy netestoval, a > doma mam vsude 32bit, z lennosti resit pripadne problemy). To plativalo u NetBurst architektury (P4), u Core2 to uz IMHO neni pravda. Pokud ale nemate problem s <4GB RAM, tak nema smysl pouzivat 64bit - rychlost v podstate neziskate a zere to vic pameti a disku. Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From pstehlik na sophics.cz Tue Dec 11 15:32:52 2007 From: pstehlik na sophics.cz (Petr Stehlik) Date: Tue, 11 Dec 2007 15:32:52 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <475E9789.6080001@sobriety.cz> References: <475E8F52.8000906@sophics.cz> <475E9789.6080001@sobriety.cz> Message-ID: <475E9F94.60901@sophics.cz> Petr Klíma wrote: > 64bit - rychlost v podstate neziskate a zere to vic pameti a disku. to by prave chtelo zjistit - prece jen je tam spousta registru navic, to by treba nejaky dobre zkompilovany/specialne napsany program mohl s chuti vyuzit... Ale celkove se pocity z pouzivani desktopu asi nijak citelne nezmeni. Pro to je lepsi spis noatime a tak. Petr From prudek na bvx.cz Tue Dec 11 15:45:56 2007 From: prudek na bvx.cz (Milos Prudek) Date: Tue, 11 Dec 2007 15:45:56 +0100 Subject: Linux na PC s 88MB RAM Message-ID: <200712111545.56396.prudek@bvx.cz> Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale 8 MB je sdilena grafika. Je to stary Celeron 333MHz. Nemel by slouzit jako samostatny PC, mel by slouzit jen pro dalkovy pristup k X serveru. Zkousel jsem Damn Small Linux ruznych verzi, naposled verzi 4.1. Kernel se spusti (resp zrejme se spusti initrd, objevi se hlasky o nalezenych pevnych discich atd. ale pak se vypis zasekne na hlasce: RAMDISK: found compressed image at block 0 a dal se to nepohne. Krome Damn Small Linux jsem pred pulrokem zkousel i Knoppix, taky to nefungovalo. Na tom PC je nainstalovan Windows 98. Zkousel jsem memtest86 1.7, bezel celou noc, udelal 22 pruchodu, bez jedine chyby. Kterou distro nebo jaky nastroj bych mel zkusit? -- Milos Prudek From jancik na seznam.cz Tue Dec 11 16:03:56 2007 From: jancik na seznam.cz (=?ISO-8859-2?Q?=22Ing=2E_Ladislav_Jan=E8=EDk=22?=) Date: Tue, 11 Dec 2007 16:03:56 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <475EA6DC.7000002@seznam.cz> DD, zkuste Vector Linux - www.vectorlinux.com lada jancik From beitlr na gw.krasno.cz Tue Dec 11 15:54:49 2007 From: beitlr na gw.krasno.cz (Roman Beitl) Date: Tue, 11 Dec 2007 15:54:49 +0100 Subject: IPtables - Jak nadefinovat rozsah IP adres + 1xIP mimo rozsah Message-ID: Dobry den, pro pristup na nas VPN server potrebuji v iptables povolit rozsah zdrojovych IP adres 212.56.58.1-212.56.58.10 a navic mimo tento rozsah jeste 209.15.15.55 Pro rozsah IP jsem pouzil toto: $IPTABLES -A FORWARD -i $INET_IFACE -m iprange --src-range 212.56.58.1-212.56.58.10 -p tcp -d $SERVERVM -j ACCEPT Dotaz: Kdyz bych chtel ale pridat jeste tu samostatnou IP 209.15.15.55 je korektni tento zapis: $IPTABLES -A FORWARD -i $INET_IFACE -s 209.15.15.55 -m iprange --src-range $VALET_VPN_2 -p tcp -d $SERVERVM -j ACCEPT Zatim to mam ve 2 pravidlech, 1x pro rozsah IP a druhe pravidlo pro samostatnou IP, rad bych to ale timto zpusobem sjednotil, jeli to zapsano v poradku. S pozdravem Roman Beitl -- Roman Beitl From lisicky na opt.cd.cz Tue Dec 11 16:40:56 2007 From: lisicky na opt.cd.cz (Jiri Lisicky) Date: Tue, 11 Dec 2007 16:40:56 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <1197387656.3102.17.camel@lisicky-jiri.opt.cd.cz> Milos Prudek píše v Út 11. 12. 2007 v 15:45 +0100: > Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale 8 > MB je sdilena grafika. > > Je to stary Celeron 333MHz. Nemel by slouzit jako samostatny PC, mel by > slouzit jen pro dalkovy pristup k X serveru. > > Zkousel jsem Damn Small Linux ruznych verzi, naposled verzi 4.1. Kernel se > spusti (resp zrejme se spusti initrd, objevi se hlasky o nalezenych pevnych > discich atd. ale pak se vypis zasekne na hlasce: > RAMDISK: found compressed image at block 0 > > a dal se to nepohne. > > Krome Damn Small Linux jsem pred pulrokem zkousel i Knoppix, taky to > nefungovalo. > > Na tom PC je nainstalovan Windows 98. Zkousel jsem memtest86 1.7, bezel celou > noc, udelal 22 pruchodu, bez jedine chyby. > > Kterou distro nebo jaky nastroj bych mel zkusit? Knoppix určitě (DSL si nejsem jistý) má filesystém komprinovaný, aby se tam toho vlezlo víc. Ušetří to sice kapacitu media, ale vše se za běhu rozbaluje - což žere procesorový čas a samozřejmě RAMku. Chce to distro, které nepase po tom aby se tam toho co nejvíce vešlo, ale které je vhodné na stroj se slabším HW. Pokud to bude sloužit k dálkovému přítupu k X serveru, co takhle to z toho serveru rovnou bootovat? viz. projekt LTSP a máte po problémech From dast na panelnet.cz Tue Dec 11 17:25:56 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Tue, 11 Dec 2007 17:25:56 +0100 Subject: 64bit versus 32bit OS In-Reply-To: References: Message-ID: <20071211162556.GA4457@panelnet.cz> Ahoj, Toto je zacatek oskliveho FLAME, ktery temer nesouvisi s linuxem a patri do linux-talk na . On Tue, Dec 11, 2007 at 01:34:25PM +0100, Petr Olsak wrote: > [...] > a mozna jen nekdy, spis ne. Co kdyz mi nekdy bude chybet misto na > disku, ktere bych mel, kdybych neistaloval verzi systemu o 20% vetsi? > 20% z jakeho zakladu? Ze 100MB, ktery system zabira. Vzhledem k tomu, ze se sata nevyrabi mensi nez 80GB. > Chapu, ze pokud bych potreboval v programu linearne adresovat pamet > vetsi nez 4GB, mam pri pouziti 64bitoveho rozsireni moznost. Ale zatim > nevim o aplikaci, ktera takovou vec nutne potrebuje (a pocitace dnes > bezne nebyvaji osazeny desitkami GB RAM). > Mate pravdu, ted jako trotl pisu #ifdef 64bit ... #else .... #endif. Protoze iso dvd a jine velke soubory nemuzu mmap(). Takze kodim dvakrat. Navic i na felu jsou servery s 16GB ram jen to hvizdne. Natoz jinde. Na desktopu je 32/64 dost jedno, az na jeden detail. Existuje mnoho aplikaci sirenych v binarni podobe at uz pluginy do mozilly, skype, yahoo messenger nebo kodeky do mplayeru... Na to musi byt nejaky 32bit chroot a v nem nejak udrzovany system. > Vzpominam na prechod 16bit -> 32bit pred patnacti lety. Tehdy zacalo > vznikat mnoho aplikaci, ktere se do 16bit architektury neveslo. > Napriklad 16bit TeX (EmTeX pro DOS: tex.exe) musel alokovat sve > nejvetsi pole "main-memory" maximalne v jednom 64kB bloku, takze se do > toho vesel plainTeX a stary LaTeX2.09 (bez prilisneho mnozstvi balicku), > ale novy LaTeX2e mel problemy. Vznikaly ruzne tex386.exe a dalsi zrudy > s ruznymi DOSoidnimi rezimy rozsirene pameti, coz byla silenost. > Dekujme tedy za tech 32bitu. Dalsi aplikace tehdy take pocitovaly potrebu > opustit sveraci kazaju ve forme segment-offset gymnastiky pointeru do > pameti. Ale dnes? Potrebuji dnesni aplikace opustit sveraci kazajku ve > forme maximalne 4GB linerane adresovane pameti? Mozna nektere velmi > specificke, ale ja zde mluvim o beznych aplikacich pro desktop. > > Tesim se na Vase nazory, zkusenosti, rozbory problemu... > Toto je idealni tema do linux-talk jestli jeste funguje. Jestli ne, tak stejne bych uvital odpovedi tam. -- Dalibor Straka From prudek na bvx.cz Tue Dec 11 17:35:47 2007 From: prudek na bvx.cz (Milos Prudek) Date: Tue, 11 Dec 2007 17:35:47 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <1197387656.3102.17.camel@lisicky-jiri.opt.cd.cz> References: <200712111545.56396.prudek@bvx.cz> <1197387656.3102.17.camel@lisicky-jiri.opt.cd.cz> Message-ID: <200712111735.47944.prudek@bvx.cz> > Pokud to bude sloužit k dálkovému přítupu k X serveru, co takhle to z > toho serveru rovnou bootovat? viz. projekt LTSP a máte po problémech Musel bych shanet boot PROM pro danou sitovou kartu, ne? To nechci... -- Milos Prudek From prudek na bvx.cz Tue Dec 11 17:39:33 2007 From: prudek na bvx.cz (Milos Prudek) Date: Tue, 11 Dec 2007 17:39:33 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <475EA6DC.7000002@seznam.cz> References: <200712111545.56396.prudek@bvx.cz> <475EA6DC.7000002@seznam.cz> Message-ID: <200712111739.34055.prudek@bvx.cz> On Tuesday 11 of December 2007 16:03:56 Ing. Ladislav Jančík wrote: > DD, > zkuste Vector Linux - www.vectorlinux.com Diky za doporuceni, pane inzenyre. Asi jste necetl muj email podrobne. Psal jsem ze tam mam 88MB RAM. Vectorlinux uvadi minimum 96MB RAM. -- Milos Prudek From ovlach na nanobyte.cz Tue Dec 11 17:50:59 2007 From: ovlach na nanobyte.cz (Ondrej Vlach) Date: Tue, 11 Dec 2007 17:50:59 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <200712111750.59204.ovlach@nanobyte.cz> Dobrý den, Já na podobném počítači provozuju CentOS, ale je to router, takže bez Xek... Nevím jak na tom poběží X server :-( [root na r4a95 ~]# free total used free shared buffers cached Mem: 61016 58188 2828 0 832 9600 -/+ buffers/cache: 47756 13260 Swap: 522072 53952 468120 [root na r4a95 ~]# cat /proc/cpuinfo processor : 0 vendor_id : GenuineIntel cpu family : 6 model : 5 model name : Pentium II (Deschutes) stepping : 2 cpu MHz : 350.923 cache size : 512 KB fdiv_bug : no hlt_bug : no f00f_bug : no coma_bug : no fpu : yes fpu_exception : yes cpuid level : 2 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 mtrr pge mca cmov pat pse36 mmx fxsr bogomips : 702.43 [root na r4a95 ~]# cat /etc/*-release CentOS release 4.5 (Final) On Tuesday 11 of December 2007 15:45:56 Milos Prudek wrote: > Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale > 8 MB je sdilena grafika. > > Je to stary Celeron 333MHz. Nemel by slouzit jako samostatny PC, mel by > slouzit jen pro dalkovy pristup k X serveru. > > Zkousel jsem Damn Small Linux ruznych verzi, naposled verzi 4.1. Kernel se > spusti (resp zrejme se spusti initrd, objevi se hlasky o nalezenych pevnych > discich atd. ale pak se vypis zasekne na hlasce: > RAMDISK: found compressed image at block 0 > > a dal se to nepohne. > > Krome Damn Small Linux jsem pred pulrokem zkousel i Knoppix, taky to > nefungovalo. > > Na tom PC je nainstalovan Windows 98. Zkousel jsem memtest86 1.7, bezel > celou noc, udelal 22 pruchodu, bez jedine chyby. > > Kterou distro nebo jaky nastroj bych mel zkusit? -- Ondřej Vlach Software developer & consultant From fuky na sunstel.asu.cas.cz Tue Dec 11 17:54:20 2007 From: fuky na sunstel.asu.cas.cz (Jan Fuchs) Date: Tue, 11 Dec 2007 17:54:20 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <20071211165419.GA21186@sunstel.asu.cas.cz> Zdravím, 11. Dec (Tuesday) v 15:45:56 CET 2007, prudek na bvx.cz napsal(a): > Potreboval bych dostat Linux na PC s 88MB RAM. > Je to stary Celeron 333MHz > > Kterou distro nebo jaky nastroj bych mel zkusit? Vyndej HDD, nainstaluj si Tvoji oblíbenou distribuci (třeba Debian) na silnějším stroji, udělej si jádro pro starý stroj, vlož HDD zpět. S pozdravem Jan Fuchs -- /************************************************************** * _ Žádný program není bezchybný, dokonalý ani nejlepší, * * °v° to samé platí i o lidech a nejen o nich. * * /(_)\ -- Jan Fuchs -- * * ^ ^ * * http://www.fuky.org ICQ: 200692177 * **************************************************************/ From prudek na bvx.cz Tue Dec 11 18:42:34 2007 From: prudek na bvx.cz (Milos Prudek) Date: Tue, 11 Dec 2007 18:42:34 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <20071211165419.GA21186@sunstel.asu.cas.cz> References: <200712111545.56396.prudek@bvx.cz> <20071211165419.GA21186@sunstel.asu.cas.cz> Message-ID: <200712111842.34797.prudek@bvx.cz> > Vyndej HDD, nainstaluj si Tvoji oblíbenou distribuci (třeba Debian) na > silnějším stroji, udělej si jádro pro starý stroj, vlož HDD zpět. To zni rozumne, zapomnel jsem uz ze to muzu udelat. Pred lety jsem jadra kompiloval docela casto, ale ted uz 3 roky ne. Muzete mi napsat nejake tipy jak to udelat aby se minimalizovala zabrana RAM? - vsechno co se da dat do modulu (ale to distribucni jadro stejne uz byva) - jeste neco jineho? -- Milos Prudek From mj na ucw.cz Tue Dec 11 18:46:27 2007 From: mj na ucw.cz (Martin `MJ' Mares) Date: Tue, 11 Dec 2007 18:46:27 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <475E9F94.60901@sophics.cz> References: <475E8F52.8000906@sophics.cz> <475E9789.6080001@sobriety.cz> <475E9F94.60901@sophics.cz> Message-ID: Zdravim! > to by prave chtelo zjistit - prece jen je tam spousta registru navic, to > by treba nejaky dobre zkompilovany/specialne napsany program mohl s > chuti vyuzit... Ale celkove se pocity z pouzivani desktopu asi nijak > citelne nezmeni. Pro to je lepsi spis noatime a tak. Na desktopu se to velmi pravdepodobne nepozna, u programu narocnych na vypocetni vykon bezne vidam zrychleni o cca 10% na 64-bitovem systemu, dalsi registry se opravdu poznaji. Na druhou stranu urcite existuji programy, ktere se zpomali, napriklad proto, ze se datove struktury s vetsimi pointery hure cacheuji. Have a nice fortnight -- Martin `MJ' Mares http://mj.ucw.cz/ Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth "I don't give a damn for a man that can only spell a word one way." -- M. Twain From prudek na bvx.cz Tue Dec 11 18:55:28 2007 From: prudek na bvx.cz (Milos Prudek) Date: Tue, 11 Dec 2007 18:55:28 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111750.59204.ovlach@nanobyte.cz> References: <200712111545.56396.prudek@bvx.cz> <200712111750.59204.ovlach@nanobyte.cz> Message-ID: <200712111855.29104.prudek@bvx.cz> > Já na podobném počítači provozuju CentOS, ale je to router, takže bez > Xek... Nevím jak na tom poběží X server :-( Beh X je bohuzel zasadni pozadavek. -- Milos Prudek From michal.rybarik na ecce.sk Tue Dec 11 19:07:58 2007 From: michal.rybarik na ecce.sk (Michal Rybarik) Date: Tue, 11 Dec 2007 19:07:58 +0100 Subject: Asterisk - propojeni dvou klasickych ustreden pres asterisk In-Reply-To: <7B92CD4F512D08469E24CCAC7856D4C68CF5B7@phants01.meggle.cz> References: <7B92CD4F512D08469E24CCAC7856D4C68CF5B7@phants01.meggle.cz> Message-ID: <475ED1FE.9090804@ecce.sk> Dobry den, > Netusite nekdo, jestli by mi pomohl v tomhle Asterisk? V obou ustrednach jsou volne jak analogove, tak ISDN porty. Slo by pridat ke kazde ustredne jeden Asterisk s ISDN nebo analogovou kartou a spojit ustredny pres Asterisk? Predpokladam, ze by uzivatele misto takoveho toho +420 cele cislo volali treba predcisli 99 + linku na protejsi ustredne. > Jde neco takoveho udelat? Ano presne takto sa to da. S ohladom na rychlost vytacania cisel a kvalitu hovoru odporucam radsej prepajat asterisk s ustrednou cez ISDN nez analog, je to velmi velky rozdiel. Na ustredniach a hlavne na tych Asteriskoch bude potrebne spravit vhodny dialplan, tj aby vytocenie niektoreho z cisel to korektne spojilo na tu druhu stranu. Spojit asterisky navzajom je najlepsie cez IAX (na rozdiel od SIPu sa bez problemov vysporiada aj s NAT), pripojenie ISDN napriklad cez chan_capi driver do Asterisku. Viac pomoze Google s klucovymi slovami "asterisk wiki". Dialplan sa robi v extensions.conf. M.R. From bodlak na email.cz Tue Dec 11 19:12:11 2007 From: bodlak na email.cz (Martin =?ISO-8859-1?Q?Bodl=E1k?=) Date: Tue, 11 Dec 2007 19:12:11 +0100 Subject: Existuje =?UTF-8?Q?n=C4=9Bco=2C?= co by mi pomohlo odstranit =?UTF-8?Q?nepot=C5=99ebn=C3=A9?= =?UTF-8?Q?_bal=C3=AD=C4=8Dky?= v =?ISO-8859-1?Q?syst=E9mu=3F?= In-Reply-To: References: Message-ID: <1197396731.6389.55.camel@bodli.net> Já jsem ve starších časech na fedoře používal skript rpmorphan.pl, ale už nevím, odkud to bylo; Google mi našel jenom http://rpmorphan.sourceforge.net/ a nevím, jestli je to správná adresa. M. Milan BERKA píše v Út 11. 12. 2007 v 14:18 +0100: > Dobrý den, > používám Fedora 8, mám obavu, že se mi po různých upgrade nahromadilo v > systému mnoho balíčků, které tam možná nejsou ani potřeba. > Potřeboval bych něco, co by mi vypsalo závislosti balíčků v nějakém > řetězci, kde bych mohl usoudit, které posloupnosti nejsou potřeba. > > Jinak funguji tak, že se mi zdá, že něco není potřeba a při odstranění > YUMem to vypíše závislosti, které mne přivedou na myšlenku, že toto tedy > odstranit nelze... Metoda pokus omyl a to je na dlouho... > > Dík za nápad. > > MB. > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux -- Martin Bodlák, Ostrava mailto:bodlak na email.cz From talk na advokati.biz Tue Dec 11 19:52:14 2007 From: talk na advokati.biz (Daniel Hrbac) Date: Tue, 11 Dec 2007 19:52:14 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <475EDC5E.1060003@advokati.biz> Milos Prudek napsal(a): > Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale 8 > MB je sdilena grafika. > > Je to stary Celeron 333MHz. Nemel by slouzit jako samostatny PC, mel by > slouzit jen pro dalkovy pristup k X serveru. > > Zkousel jsem Damn Small Linux ruznych verzi, naposled verzi 4.1. Kernel se > spusti (resp zrejme se spusti initrd, objevi se hlasky o nalezenych pevnych > discich atd. ale pak se vypis zasekne na hlasce: > RAMDISK: found compressed image at block 0 > > a dal se to nepohne. > > Krome Damn Small Linux jsem pred pulrokem zkousel i Knoppix, taky to > nefungovalo. > > Na tom PC je nainstalovan Windows 98. Zkousel jsem memtest86 1.7, bezel celou > noc, udelal 22 pruchodu, bez jedine chyby. > > Kterou distro nebo jaky nastroj bych mel zkusit? > > zkousel jsem dsl na 32MB a docela to fungovalo. koukal jste do googlu? je tam tenhle problém docela popsán. zkuste pri bootu pridat parametr ramdisk_size=16000 ta hlaska by mela byt cela nejak takhle: RAMDISK driver initialized: 16 RAM disks of 16000K size 1024 blocksize RAMDISK: Compressed image found at block 0 pak tam pisou jeste neco o tom, ze jsou popletene bootovaci image s situaci kdy tam je vice systemu a grub/lilo -- Daniel Hrbac talk na advokati.biz skype: hrbacdaniel From petr na olsak.net Tue Dec 11 21:04:02 2007 From: petr na olsak.net (Petr Olsak) Date: Tue, 11 Dec 2007 21:04:02 +0100 (CET) Subject: 64bit versus 32bit OS Message-ID: Dalibor Straka: > > Toto je zacatek oskliveho FLAME, ktery temer nesouvisi s linuxem > a patri do linux-talk na . Nechtel jsem vyvolavat flame a, domnivam se, zatim se zde nic takoveho nekona. Myslim si, ze v soucasne dobe skoro kazdy, kdo instaluje do noveho pocitace Linux, stoji pred rozhodnutim, zda tam dat 32bit nebo 64bit verzi. Obe moznosti ma k dispozici. Uvital by tedy rozbor teto problematiky, nazory pro jednu i druhou variantu, aby se mohl rozhodnout. Myslim si tedy, ze vysledek tohoto vlakna muze byt pro mnoho lidi uzitecny. Byl zde zminen linux-talk. Nevim sice, co to je, ale tusim v tom neco jako "pokec". Ja nechci plkat, s nekym se dohadovat. Ja bych si pral, kdyby v tomto vlaknu vznikla vseobecne uzitecna a zodpovedna argumentace k problemu. Napr. "vyzkousel jsem na takovem HW obe verze, udelal jsem takove srovnavaci testy a zde jsou vysledky". Nebo "seriozni srovnani najdete na...". Nez jsem toto vlakno zalozil, stravil jsem mnoho hodin hledani takovych informaci na Internetu, ovsem marne. Recenzenti k procesorum se mi zdaji casto uplne mimo, kdyz zminuji 64bitove rozsireni. Pokud zrovna fandi AMD, pak to do nebe vychvaluji, pokud fandi Intelum, pak to nezminuji. Predstavme si aplikaci ve verzi 32 bit i 64 bit, ktera k tomu, aby vyresila ulohu dane slozitosti S, musi dynamicky alokovat m1 pameti v 32bit verzi a m2 pameti v 64bit verzi. Neco jako vypocet pi na mnoho desetinnych mist (to je samozrejme nepotrebna blbost, muzeme si ale predstavit i uzitecnejsi ulohy). Je zrejme, ze m2 > m1, samozrejme zalezi na datove strukture, ovsem domnivam se, ze v kazde datove strukture se vyskytuje vyznamne mnozstvi pointeru, takze treba nebudu daleko od pravdy, kdyz budu uvazovat m2 = 1,5*m1. Necht mame v pocitaci 4GB RAM a slozitost ulohy S je stanovena tak, ze m1 = skoro 4GB (az na male mistecko pro system). 32bit verze takove aplikce nam vrati na danem pocitaci uzitecny vysledek, zatimco 64bit verze si vyzada 6GB pameti, to v systemu neni, zacne to swapovat a vysledku se nedockame. Tj. 64bit verze nam nevrati zadny vysledek. Mame-li v pocitaci ale 8GB RAM, pak se situace obrati: Pri slozitosti S+1 dojde 32bit aplikaci pamet a zkolabuje, zatimco 64bit aplikace nam vrati vysledek. Vychazi mi z toho, ze pokud mam v pocitaci 4GB RAM a mene, pak se 64bit OS nevyplati. Mam-li v pocitaci 4 az 6 GB RAM, pak to je nejmene vhodne mnozsti RAM, protoze 32bit aplikce to neobslouzi a 64bit zaberou celou RAM drive, nez srovnatelne 32bit aplikace pri 4GB RAM. Teprve od cca 8GB RAM se vyplati uvazovat o 64bitovem OS a to jen tehdy, pokud to budu chtit k necemu vyuzit (napr. spoustet 64bit Mathematicu a pocitat neco, co dosud v 32bitech vubec neslo). Myslite, ze je mozne takto uvazovat? Konecne: omlouvam se, ze jsem zmrsil jmeno firmy vyrabejici procesory i oznaceni pro jejich 64bit rozsireni. Nebyl to muj zamer. Jsem rad, ze jste to pochopili spravne. Zdravim Petr Olsak From prudek na bvx.cz Tue Dec 11 21:23:19 2007 From: prudek na bvx.cz (Milos Prudek) Date: Tue, 11 Dec 2007 21:23:19 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <475EDC5E.1060003@advokati.biz> References: <200712111545.56396.prudek@bvx.cz> <475EDC5E.1060003@advokati.biz> Message-ID: <200712112123.19269.prudek@bvx.cz> > pridat parametr ramdisk_size=16000 Zkusim to s timhle parametrem. -- Milos Prudek From dast na panelnet.cz Tue Dec 11 22:17:17 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Tue, 11 Dec 2007 22:17:17 +0100 Subject: 64bit versus 32bit OS In-Reply-To: References: Message-ID: <20071211211717.GA6259@panelnet.cz> Hezky vecer vsem, On Tue, Dec 11, 2007 at 09:04:02PM +0100, Petr Olsak wrote: > > Dalibor Straka: > > > > Toto je zacatek oskliveho FLAME, ktery temer nesouvisi s linuxem > > a patri do linux-talk na . > [...] > > Byl zde zminen linux-talk. Nevim sice, co to je, ale tusim v tom neco > jako "pokec". Ja nechci plkat, s nekym se dohadovat. Ja bych si pral, > Bohuzel linux-talk@ je zruseny. > kdyby v tomto vlaknu vznikla vseobecne uzitecna a zodpovedna argumentace > k problemu. Napr. "vyzkousel jsem na takovem HW obe verze, > udelal jsem takove srovnavaci testy a zde jsou vysledky". Nebo "seriozni > srovnani najdete na...". Nez jsem toto vlakno zalozil, stravil jsem > mnoho hodin hledani takovych informaci na Internetu, ovsem marne. > Recenzenti k procesorum se mi zdaji casto uplne mimo, kdyz > zminuji 64bitove rozsireni. Pokud zrovna fandi AMD, pak to do nebe > vychvaluji, pokud fandi Intelum, pak to nezminuji. > Pro Bezneho Frantu Uzivatele nema vyznam rozlisovat 32 vs 64 bitu. Odborni vi, ze treba nektere sifrovaci algoritmy se obrovsky zrychli, muze mit vice pameti, vice registru. Stale cekam na genialni algoritmy, ktere zrychli (de)kompresi audia/videa vice nezli 2x ;-). > Predstavme si aplikaci ve verzi 32 bit i 64 bit, ktera k tomu, aby > vyresila ulohu dane slozitosti S, musi dynamicky alokovat m1 pameti > v 32bit verzi a m2 pameti v 64bit verzi. Neco jako vypocet pi na mnoho > desetinnych mist (to je samozrejme nepotrebna blbost, muzeme si ale > predstavit i uzitecnejsi ulohy). Je zrejme, ze m2 > m1, samozrejme > zalezi na datove strukture, ovsem domnivam se, ze v kazde datove > strukture se vyskytuje vyznamne mnozstvi pointeru, takze treba nebudu > daleko od pravdy, kdyz budu uvazovat m2 = 1,5*m1. Necht mame v > Mylite se, pokud nepujde o specielni aplikaci. Obvykle pointeru bude minimum oproti pismenkum v retezcich, par nactenym blokum ze souboru, proste to vyvazi jedno mensi pole[] cehokoliv. V pripade GUI aplikace pomlcim zcela ;-). Jen pro zajimavost sizeof(int) na 64bit linuxu vraci 4 ne 8, ukazatele samozrejme 8. > pocitaci 4GB RAM a slozitost ulohy S je stanovena tak, ze m1 = skoro 4GB > (az na male mistecko pro system). 32bit verze takove aplikce nam > Mam skoro vsude(*) 64bit systemy, take mi prislo zvracene instalovat Debian AMD64 na Core2Duo. Doba je takova, ze pameti je hodne a procesory jsou pomale. > vrati na danem pocitaci uzitecny vysledek, zatimco 64bit verze si > vyzada 6GB pameti, to v systemu neni, zacne to swapovat a vysledku se > nedockame. Tj. 64bit verze nam nevrati zadny vysledek. Mame-li v > pocitaci ale 8GB RAM, pak se situace obrati: Pri slozitosti S+1 dojde > 32bit aplikaci pamet a zkolabuje, zatimco 64bit aplikace nam vrati > vysledek. To je strasna demagogie. a) Takove aplikace bezne nejsou, kdyz jsou, vim o nich a vetsinou jsou tim jedinym co na danem zeleze bezi. b) Nesouhlasim ani s m2 = 1.1*m1 [...] Ani na desktopu ani na vetsine zatizenych serveru se mi uz pridana pamet neprojevi na narustu vykonu a musim delat uplne jine saskariny. Osobne si myslim, ze je uplne jedno jestli pouzijete 32 nebo 64 system, pokud nemate specielni duvod nejaky preferovat ci druhy zatracovat. (*) Az na mnozinu nulove miry ;). -- Dalibor Straka From mcepl na redhat.com Tue Dec 11 22:23:34 2007 From: mcepl na redhat.com (Matej Cepl) Date: Tue, 11 Dec 2007 22:23:34 +0100 Subject: fedora 8 a rozbite fonty References: Message-ID: On 2007-12-11, 09:36 GMT, Michal Vojan wrote: > Dobry den, provedl jsem upgrade z fedora 7 na 8 a po posledni davce, ktera > obsahovala xorg (7.3) mam rozbite fonty. jsou jakoby prerusovane podtrzene, > znaky jsou zprava urezane. Musim pouzivat vetsi pismo, abych si neco > precetl. Zda se ale,ze problem se ukazuje jen v kde (3.5.8). Ve fvwm jsem > to nezaregistroval, nebo jen spusteny xterm mel font take v poradku. Jeste > budu zkouset jiny window manager. Zatim jsem nic na webu nenasel. Pokud > jste se s takovym problemem nekdo setkal, prosim o info, jak jej odstranit. Zkuste šoupnout někam stranou /etc/X11/xorg.conf a zrestartovat Xka. Nepomůže automagická rekonfigurace? Pokud to nebude fungovat napalte nám bug na http://bugzilla.redhat.com (produkt Fedora, komponent podle Vašeho grafického driveru, např. xorg-x11-drv-ati). Výsledky? Matěj From lukesh na seznam.cz Tue Dec 11 22:34:02 2007 From: lukesh na seznam.cz (Jaroslav Lukesh) Date: Tue, 11 Dec 2007 22:34:02 +0100 Subject: Linux na PC s 88MB RAM References: <200712111545.56396.prudek@bvx.cz> Message-ID: <0ffd01c83c3d$8e852060$6164a8c0@xp> Zkuste distra pro tenké klienty, třeba thinstation ----- Original Message ----- From: "Milos Prudek" Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale 8 MB je sdilena grafika. Je to stary Celeron 333MHz. Nemel by slouzit jako samostatny PC, mel by slouzit jen pro dalkovy pristup k X serveru. Zkousel jsem Damn Small Linux ruznych verzi, naposled verzi 4.1. Kernel se spusti (resp zrejme se spusti initrd, objevi se hlasky o nalezenych pevnych discich atd. ale pak se vypis zasekne na hlasce: RAMDISK: found compressed image at block 0 From mcepl na redhat.com Tue Dec 11 22:20:32 2007 From: mcepl na redhat.com (Matej Cepl) Date: Tue, 11 Dec 2007 22:20:32 +0100 Subject: Existuje =?UTF-8?Q?n=C4=9Bco,?= co by mi pomohlo odstranit =?UTF-8?Q?nepot=C5=99ebn=C3=A9?= =?UTF-8?Q?bal=C3=AD=C4=8Dky?= v =?UTF-8?Q?syst=C3=A9mu??= References: <1197379804.9921.20.camel@pali-pc.hk.tmapy.cz> Message-ID: <0ib335xlei.ln2@ppp1053.in.ipex.cz> On 2007-12-11, 13:41 GMT, Milan BERKA wrote: > No to je právě ten pokus a omyl ... > > chtěl jsem něco typu > bal1 - bal2 - bal3 > bal4 > bal5 - bal6 - bal7 - bal8 -bal9 package-cleanup --leaves (z balíčku yum-utils) Matěj Cepl From mcepl na redhat.com Tue Dec 11 22:28:17 2007 From: mcepl na redhat.com (Matej Cepl) Date: Tue, 11 Dec 2007 22:28:17 +0100 Subject: Ubuntu ve =?UTF-8?Q?firemn=C3=AD?= =?UTF-8?Q?s=C3=ADti.?= References: <475D312A.6070207@seznam.cz> <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> <475E310E.2080802@seznam.cz> Message-ID: On 2007-12-11, 06:41 GMT, Petr "Qaxi" Klíma wrote: > Sorry, ale RHEL 5.1 je jako vsechny RHEL distro na desktopu > nepouzitelny FF 1.5, TB1.5, OO 2.0.4 Všechny tyto komponenty budou upgradovány do aktuálních stabilních verzí v RHELu 5.2 (asi, nezaručeno, atp.). Co se týče Novellího OOo, měl jsem o tom dlouhou rozmluvu s naším správcem OOo a přísahal mi, že z něho utekl hlavně proto kvůli problémům se stabilitou (RHEL tuším do 4 používal go-ooo.org zdrojáky nebo alespoň patche, teď nevím přesně), a že si přechod na Suní OOo nemůže vynachválit. (absolutně nechci vyvolávat flame war, jenom jestli jste si skutečně dobře promysleli výběr distra). Matěj From mj na ucw.cz Tue Dec 11 22:46:25 2007 From: mj na ucw.cz (Martin `MJ' Mares) Date: Tue, 11 Dec 2007 22:46:25 +0100 Subject: 64bit versus 32bit OS In-Reply-To: References: Message-ID: Dobry vecer vespolek! > Recenzenti k procesorum se mi zdaji casto uplne mimo, kdyz > zminuji 64bitove rozsireni. Pokud zrovna fandi AMD, pak to do nebe > vychvaluji, pokud fandi Intelum, pak to nezminuji. Ja se jim ani moc nedivim, Intelove starsi nez Core meli EM64T ukrutne pomale. > Predstavme si aplikaci ve verzi 32 bit i 64 bit, ktera k tomu, aby > vyresila ulohu dane slozitosti S, musi dynamicky alokovat m1 pameti > v 32bit verzi a m2 pameti v 64bit verzi. Neco jako vypocet pi na mnoho > desetinnych mist (to je samozrejme nepotrebna blbost, muzeme si ale > predstavit i uzitecnejsi ulohy). Je zrejme, ze m2 > m1, samozrejme > zalezi na datove strukture, ovsem domnivam se, ze v kazde datove > strukture se vyskytuje vyznamne mnozstvi pointeru, takze treba nebudu > daleko od pravdy, kdyz budu uvazovat m2 = 1,5*m1. Prijde mi, ze to je od pravdy velice daleko, mnohe programy ukladaji v pameti spis retezce nez pointerove struktury. Konec koncu zrovna ten zmineny vypocet pi spotrebuje pravdepodobne plus minus chlup stejne pameti na obou architekturach. > Necht mame v > pocitaci 4GB RAM a slozitost ulohy S je stanovena tak, ze m1 = skoro 4GB > (az na male mistecko pro system). Kterezto male mistecko je obvykle 1GB :-) Myslim, ze takovymito uvahami se k zadnym smysluplnym vysledkum nedostanete. Daleko lepsi by bylo zmerit realne pametove naroky nejakych konkretnich aplikaci. Mejte se skvele Martin Mares From mcepl na redhat.com Tue Dec 11 22:25:06 2007 From: mcepl na redhat.com (Matej Cepl) Date: Tue, 11 Dec 2007 22:25:06 +0100 Subject: Ubuntu ve =?UTF-8?Q?firemn=C3=AD?= =?UTF-8?Q?s=C3=ADti.?= References: <475D312A.6070207@seznam.cz> Message-ID: On 2007-12-10, 12:29 GMT, Petr "Qaxi" Klíma wrote: > prozatím máme jak distro vybrané Ubuntu 7.10 s tím, že až vyjde > 8.04 LTS tak na nej zupgradujeme a máme 3 roky pokoj ...) > > Vzhledem k tomu, že jsem vyrostl na RH (žádné RH distro nám na desktop > nevyhovuje ....) tak budu v některých věcech trochu tápat. Čistě jenom ze zvědavosti -- proč ne CentOS? Měli byste pokoj na sedm let ... :-)? Ve firemní síti by snad nemělo rozhodovat jak cool ta distribuce je, ne? Matěj From mysutka na seznam.cz Wed Dec 12 00:48:57 2007 From: mysutka na seznam.cz (Michal Vojan) Date: Wed, 12 Dec 2007 00:48:57 +0100 Subject: fedora 8 a rozbite fonty References: Message-ID: I smazat konfigurak jsem zkusil. Nepomohlo. Nakonec jsem report nasel jiz v bugzille, viz. https://bugzilla.redhat.com/show_bug.cgi?id=417241 . Vratil jsem se ke starsi verzi balicku xorg-x11-drv-ati-6.7.195-3.fc8 a fonty jsou v poradku. Michal Matej Cepl wrote: > On 2007-12-11, 09:36 GMT, Michal Vojan wrote: >> Dobry den, provedl jsem upgrade z fedora 7 na 8 a po posledni davce, >> ktera obsahovala xorg (7.3) mam rozbite fonty. jsou jakoby prerusovane >> podtrzene, znaky jsou zprava urezane. Musim pouzivat vetsi pismo, abych >> si neco precetl. Zda se ale,ze problem se ukazuje jen v kde (3.5.8). Ve >> fvwm jsem to nezaregistroval, nebo jen spusteny xterm mel font take v >> poradku. Jeste budu zkouset jiny window manager. Zatim jsem nic na webu >> nenasel. Pokud jste se s takovym problemem nekdo setkal, prosim o info, >> jak jej odstranit. > > Zkuste šoupnout někam stranou /etc/X11/xorg.conf a zrestartovat > Xka. Nepomůže automagická rekonfigurace? Pokud to nebude fungovat > napalte nám bug na http://bugzilla.redhat.com (produkt Fedora, > komponent podle Vašeho grafického driveru, např. > xorg-x11-drv-ati). > > Výsledky? > > Matěj > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From lisicky na opt.cd.cz Wed Dec 12 08:21:08 2007 From: lisicky na opt.cd.cz (Jiri Lisicky) Date: Wed, 12 Dec 2007 08:21:08 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111735.47944.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> <1197387656.3102.17.camel@lisicky-jiri.opt.cd.cz> <200712111735.47944.prudek@bvx.cz> Message-ID: <1197444069.3135.6.camel@lisicky-jiri.opt.cd.cz> Milos Prudek píše v Út 11. 12. 2007 v 17:35 +0100: > > Pokud to bude sloužit k dálkovému přítupu k X serveru, co takhle to z > > toho serveru rovnou bootovat? viz. projekt LTSP a máte po problémech > > Musel bych shanet boot PROM pro danou sitovou kartu, ne? To nechci... Když jsem si s tím kdysi dávno hrál, vzal jsem eprom pamět ze staré základní desky, nechal si od kamaráda napálit image, který jsem si vygeneroval ze stránky http://www.rom-o-matic.net/, zastrčil do síťové karty a měl jsem parádní bezdiskovou stanici. Na testování se může ten image bootovat z diskety. Pokud by tam zůstal harddisk, tak z něj. Nebo z CD či USB. Pak ještě existuje PXE, což by měly umět základní desky. Ale s tímhle už jsem si nehrál. K tomu by se vyjádřil někdo jiný. From prcek na netbox.cz Wed Dec 12 08:11:04 2007 From: prcek na netbox.cz (Petr Janda) Date: Wed, 12 Dec 2007 08:11:04 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <20071211211717.GA6259@panelnet.cz> References: <20071211211717.GA6259@panelnet.cz> Message-ID: <20071212071104.GA11721@prcek> On Tue, Dec 11, 2007 at 10:17:17PM +0100, Dalibor Straka wrote: > Hezky vecer vsem, > > On Tue, Dec 11, 2007 at 09:04:02PM +0100, Petr Olsak wrote: > > > > Dalibor Straka: > > > > > > Toto je zacatek oskliveho FLAME, ktery temer nesouvisi s linuxem > > > a patri do linux-talk na . > > > [...] > > > > Byl zde zminen linux-talk. Nevim sice, co to je, ale tusim v tom neco > > jako "pokec". Ja nechci plkat, s nekym se dohadovat. Ja bych si pral, > > > Bohuzel linux-talk@ je zruseny. Imho puvodni pisatel myslel talk na linux.cz a do toho obcas prijde nejaky spam, takze zruseny asi nebude. S pozdravem Petr Janda -- email: /bin/sh -c 'A=netbox; B=janda; printf "%s@%s.cz\n" ${B} ${A}' From PaJaSoft na FoNet.Cz Wed Dec 12 08:58:31 2007 From: PaJaSoft na FoNet.Cz (=?iso-8859-2?Q?Ing._Pavel_PaJaSoft_Janou=B9ek?=) Date: Wed, 12 Dec 2007 08:58:31 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <20071211211717.GA6259@panelnet.cz> Message-ID: <200712120758.lBC7wGIb004772@merlin.fonet.cz> linux-bounces na linux.cz wrote: > pomlcim zcela ;-). Jen pro zajimavost sizeof(int) na 64bit > linuxu vraci > 4 ne 8, ukazatele samozrejme 8. A není to proti smyslu tohoto operátoru? Nativní slovo je přece o velikosti 8 bytů... >> pocitaci 4GB RAM a slozitost ulohy S je stanovena tak, ze m1 = skoro >> 4GB (az na male mistecko pro system). 32bit verze takove aplikce nam Malé místečko je v běžně poskládaném systému zpravidla okolo 50% veškerého teoreticky adresovatelného linearního prostoru... (viz problém kolegy, který chtěl alokovat 2 krát 1GiB paměti) ------------------------------------------------------------------- Ing. Pavel Janousek (PaJaSoft) FoNet, spol. s r. o. Technicka podpora, Intranet/Internet Za Kovárnou 1, 625 00 Brno E-mail: mailto:Janousek na FoNet.Cz Tel.: +420 5 4324 4749 WWW: http://WWW.FoNet.Cz/ E-mail: mailto:Info na FoNet.Cz ------------------------------------------------------------------- From xschmi00 na stud.feec.vutbr.cz Wed Dec 12 09:24:35 2007 From: xschmi00 na stud.feec.vutbr.cz (Michal Schmidt) Date: Wed, 12 Dec 2007 09:24:35 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120758.lBC7wGIb004772@merlin.fonet.cz> References: <20071211211717.GA6259@panelnet.cz> <200712120758.lBC7wGIb004772@merlin.fonet.cz> Message-ID: <20071212092435.06e2fba6@hammerfall> Dne Wed, 12 Dec 2007 08:58:31 +0100 "Ing. Pavel PaJaSoft Janoušek" napsal(a): > linux-bounces na linux.cz wrote: > > pomlcim zcela ;-). Jen pro zajimavost sizeof(int) na 64bit > > linuxu vraci > > 4 ne 8, ukazatele samozrejme 8. > > A není to proti smyslu tohoto operátoru? Nativní slovo je > přece o velikosti 8 bytů... Proč? int na této platformě má opravdu 4 byty, takže sizeof říká pravdu. Nikde není řečeno, že by int musel odpovídat nejdelšímu slovu, s jakým je CPU schopno rozumně pracovat. Michal From PaJaSoft na FoNet.Cz Wed Dec 12 09:42:45 2007 From: PaJaSoft na FoNet.Cz (=?iso-8859-2?Q?Ing._Pavel_PaJaSoft_Janou=B9ek?=) Date: Wed, 12 Dec 2007 09:42:45 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <20071212092435.06e2fba6@hammerfall> Message-ID: <200712120842.lBC8gU70008413@merlin.fonet.cz> linux-bounces na linux.cz wrote: > Dne Wed, 12 Dec 2007 08:58:31 +0100 > "Ing. Pavel PaJaSoft Janoušek" napsal(a): > >> linux-bounces na linux.cz wrote: >>> pomlcim zcela ;-). Jen pro zajimavost sizeof(int) na 64bit linuxu >>> vraci 4 ne 8, ukazatele samozrejme 8. >> >> A není to proti smyslu tohoto operátoru? Nativní slovo je >> přece o velikosti 8 bytů... > > Proč? int na této platformě má opravdu 4 byty, takže sizeof > říká pravdu. > Nikde není řečeno, že by int musel odpovídat nejdelšímu slovu, s jakým > je CPU schopno rozumně pracovat. V tom případě nechápu proč jsme ho již v historii několikrát měnili... Krátkou rešerší jsem nalezl např. tuto definici: 1. A common name for the {integer} data type. In {C} for example, it means a (signed) integer of the computer's native {word length}. Chcete říci, že __nativní__ velikost je v 64-bitovém CPU 32-bitové číslo? Ing. Pavel Janoušek technická podpora E-mail: janousek na fonet.cz FoNet, spol. s r.o. Za Kovárnou 1, 625 00 Brno Tel.: +420 543 244 749 Fax.: +420 543 244 751 WWW : http://WWW.FoNet.Cz/ From petr.klima na sobriety.cz Wed Dec 12 10:29:59 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Wed, 12 Dec 2007 10:29:59 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120842.lBC8gU70008413@merlin.fonet.cz> References: <200712120842.lBC8gU70008413@merlin.fonet.cz> Message-ID: <475FAA17.20207@sobriety.cz> Ing. Pavel PaJaSoft Janoušek wrote: > Chcete říci, že __nativní__ velikost je v 64-bitovém CPU 32-bitové > číslo? Skoro to tak vypada. Ted jsem si to overil na Opteronu, Core2 a Itaniu. Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From xschmi00 na stud.feec.vutbr.cz Wed Dec 12 10:30:52 2007 From: xschmi00 na stud.feec.vutbr.cz (Michal Schmidt) Date: Wed, 12 Dec 2007 10:30:52 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120842.lBC8gU70008413@merlin.fonet.cz> References: <20071212092435.06e2fba6@hammerfall> <200712120842.lBC8gU70008413@merlin.fonet.cz> Message-ID: <20071212103052.2b758171@brian.englab.brq.redhat.com> On Wed, 12 Dec 2007 09:42:45 +0100 "Ing. Pavel PaJaSoft Janoušek" wrote: > linux-bounces na linux.cz wrote: > > Dne Wed, 12 Dec 2007 08:58:31 +0100 > > Proč? int na této platformě má opravdu 4 byty, takže sizeof > > říká pravdu. > > Nikde není řečeno, že by int musel odpovídat nejdelšímu slovu, s > > jakým je CPU schopno rozumně pracovat. > > V tom případě nechápu proč jsme ho již v historii několikrát > měnili... Protože delší než 16-bitový int byl výhodný v praxi. 64-bitový už by byl prakticky spíše na obtíž. > Krátkou rešerší jsem nalezl např. tuto definici: > > 1. A common name for the {integer} data type. In {C} for example, it > means a (signed) integer of the computer's native {word length}. Tato citace je odkud? Nemyslím, že z nějaké normy jazyka C. > Chcete říci, že __nativní__ velikost je v 64-bitovém CPU > 32-bitové číslo? Co je to vlastně nativní velikost? Mám pocit, že je to pojem, který si někdo zavedl jenom proto, aby mohl zaškatulkovávat procesory podle jejich bitovosti. AMD64 CPU má efektivní instrukce pro práci s 32-bitovými i 64-bitovými registry. Michal From PaJaSoft na FoNet.Cz Wed Dec 12 10:34:47 2007 From: PaJaSoft na FoNet.Cz (=?iso-8859-2?Q?Ing._Pavel_PaJaSoft_Janou=B9ek?=) Date: Wed, 12 Dec 2007 10:34:47 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <20071212103052.2b758171@brian.englab.brq.redhat.com> Message-ID: <200712120934.lBC9YXQN011624@merlin.fonet.cz> linux-bounces na linux.cz wrote: > Co je to vlastně nativní velikost? Mám pocit, že je to pojem, který si Že by velikost adresní sběrnice? Proto sice bylo I80386 DX i SX, přesto oba patřily mezi 32-bitové procesory, přestože SX byla "očesaná" varianta právě (mimo jiné) v datové sběrnici... ------------------------------------------------------------------- Ing. Pavel Janousek (PaJaSoft) FoNet, spol. s r. o. Technicka podpora, Intranet/Internet Za Kovárnou 1, 625 00 Brno E-mail: mailto:Janousek na FoNet.Cz Tel.: +420 5 4324 4749 WWW: http://WWW.FoNet.Cz/ E-mail: mailto:Info na FoNet.Cz ------------------------------------------------------------------- From xschmi00 na stud.feec.vutbr.cz Wed Dec 12 10:50:26 2007 From: xschmi00 na stud.feec.vutbr.cz (Michal Schmidt) Date: Wed, 12 Dec 2007 10:50:26 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120934.lBC9YXQN011624@merlin.fonet.cz> References: <20071212103052.2b758171@brian.englab.brq.redhat.com> <200712120934.lBC9YXQN011624@merlin.fonet.cz> Message-ID: <20071212105026.6b89ebf9@brian.englab.brq.redhat.com> On Wed, 12 Dec 2007 10:34:47 +0100 "Ing. Pavel PaJaSoft Janoušek" wrote: > linux-bounces na linux.cz wrote: > > Co je to vlastně nativní velikost? Mám pocit, že je to pojem, který > > si > > Že by velikost adresní sběrnice? I kdyby tohle byla přesná definice, tak není důvod, aby velikost adresní sběrnice odpovídala délce int. Michal From spam na nagano.cz Wed Dec 12 10:52:20 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Wed, 12 Dec 2007 10:52:20 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120842.lBC8gU70008413@merlin.fonet.cz> References: <200712120842.lBC8gU70008413@merlin.fonet.cz> Message-ID: <475FAF54.7040903@nagano.cz> Ing. Pavel PaJaSoft Janoušek napsal(a): > V tom případě nechápu proč jsme ho již v historii několikrát > měnili... Krátkou rešerší jsem nalezl např. tuto definici: > > 1. A common name for the {integer} data type. In {C} for example, it means > a (signed) integer of the computer's native {word length}. > > Přiznávám, že specifikaci ANSI C ani C99 jsem nečetl, ale jsem přesvědčený, že je tam něco jako: sizeof(char) == 1 sizeof(char) <= sizeof(short) <= sizeof(int) <= sizeof(long) Z toho mi plyne, že pokud by sizeof(int) bylo 8, tak si můžu vybrat, zda sizeof(short) bude 2 nebo 4, ale datový typ zbylé velikosti nebude možné použít. Současný stav na AMD64 sice může vypadat nelogicky, ale existují datové typy všech velikostí. Jak toto řeší jiné 64bitové architektury? K Alphě se už nedostanu... Láďa From petr.klima na sobriety.cz Wed Dec 12 10:58:35 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Wed, 12 Dec 2007 10:58:35 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120934.lBC9YXQN011624@merlin.fonet.cz> References: <200712120934.lBC9YXQN011624@merlin.fonet.cz> Message-ID: <475FB0CB.2090606@sobriety.cz> Ing. Pavel PaJaSoft Janoušek wrote: > Že by velikost adresní sběrnice? Proto sice bylo I80386 DX i SX, > přesto oba patřily mezi 32-bitové procesory, přestože SX byla "očesaná" > varianta právě (mimo jiné) v datové sběrnici... To mi taky nesedi, to pak amd64 je 40bitovy procesor, Itanium (tusim) 48bitovy. Asi se s tim budeme muset smirit, i kdyz mne to taky prekvapilo... Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From ok1ced na nagano.cz Wed Dec 12 11:09:44 2007 From: ok1ced na nagano.cz (Josef Štengl) Date: Wed, 12 Dec 2007 11:09:44 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <20071212100944.GB27411@nagano.cz> Nedávno asi před týdnem jsem naistaloval debian na noťas s 96 MB RAM. Nevím jestli to má sdílenou grafiku ale pravděpodobně nikoliv. Inu plouží se to. Docela využívám konzole, když to jde z důvodu rychlosti. Dají se tam opužívat i oofice, když člověk přetrpí delší start. Josef On Tue, Dec 11, 2007 at 03:45:56PM +0100, Milos Prudek wrote: > Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale 8 > MB je sdilena grafika. > > Je to stary Celeron 333MHz. Nemel by slouzit jako samostatny PC, mel by > slouzit jen pro dalkovy pristup k X serveru. > > Zkousel jsem Damn Small Linux ruznych verzi, naposled verzi 4.1. Kernel se > spusti (resp zrejme se spusti initrd, objevi se hlasky o nalezenych pevnych > discich atd. ale pak se vypis zasekne na hlasce: > RAMDISK: found compressed image at block 0 > > a dal se to nepohne. > > Krome Damn Small Linux jsem pred pulrokem zkousel i Knoppix, taky to > nefungovalo. > > Na tom PC je nainstalovan Windows 98. Zkousel jsem memtest86 1.7, bezel celou > noc, udelal 22 pruchodu, bez jedine chyby. > > Kterou distro nebo jaky nastroj bych mel zkusit? > > > -- > Milos Prudek > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From xschmi00 na stud.feec.vutbr.cz Wed Dec 12 11:12:53 2007 From: xschmi00 na stud.feec.vutbr.cz (Michal Schmidt) Date: Wed, 12 Dec 2007 11:12:53 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <475FAF54.7040903@nagano.cz> References: <200712120842.lBC8gU70008413@merlin.fonet.cz> <475FAF54.7040903@nagano.cz> Message-ID: <20071212111253.38d96ddb@brian.englab.brq.redhat.com> On Wed, 12 Dec 2007 10:52:20 +0100 Ladislav Vaiz wrote: > Ing. Pavel PaJaSoft Janoušek napsal(a): > > V tom případě nechápu proč jsme ho již v historii několikrát > > měnili... Krátkou rešerší jsem nalezl např. tuto definici: > > > > 1. A common name for the {integer} data type. In {C} for example, > > it means a (signed) integer of the computer's native {word length}. > > > > > Přiznávám, že specifikaci ANSI C ani C99 jsem nečetl, ale jsem > přesvědčený, že je tam něco jako: > > sizeof(char) == 1 > sizeof(char) <= sizeof(short) <= sizeof(int) <= sizeof(long) > > Z toho mi plyne, že pokud by sizeof(int) bylo 8, tak si můžu vybrat, > zda sizeof(short) bude 2 nebo 4, ale datový typ zbylé velikosti > nebude možné použít. Současný stav na AMD64 sice může vypadat > nelogicky, ale existují datové typy všech velikostí. > Jak toto řeší jiné 64bitové architektury? K Alphě se už nedostanu... Nevím, jaké velikosti bývají obvyklé na Alphě, ale je vhodné si uvědomit, že velikosti datových typů jsou závislé na použitém překladači C. Na stejné HW platformě můžou použít různé překladače různé velikosti (MS Visual C++ má na x86_64 32-bitový nejen int, ale i long). Michal From honzarezna na seznam.cz Wed Dec 12 11:52:43 2007 From: honzarezna na seznam.cz (=?iso-8859-2?Q?Jan=20=D8ezn=ED=E8ek?=) Date: Wed, 12 Dec 2007 11:52:43 +0100 (CET) Subject: =?iso-8859-2?Q?Odp=3ARe=3A=20Existuje=20n=ECco=2C=20co=20by=20mi=20pomohlo=20odstranit=20nepot=F8ebn=E9=20bal=ED=E8ky=20v=20syst=E9mu=3F?= In-Reply-To: <1197396731.6389.55.camel@bodli.net> Message-ID: <826.1626-16214-453163153-1197456762@seznam.cz> Jé a neexistuje něco podobného pro Mandrivu? Nebo jak by se to dalo řešit? Díky Honza > ------------ Původní zpráva ------------ > Od: Martin Bodlák > Předmět: Re: Existuje něco, co by mi pomohlo odstranit nepotřebné balíčky v > systému? > Datum: 11.12.2007 20:06:59 > ---------------------------------------- > > Já jsem ve starších časech na fedoře používal skript rpmorphan.pl, ale > už nevím, odkud to bylo; Google mi našel jenom > http://rpmorphan.sourceforge.net/ a nevím, jestli je to správná adresa. > > M. > > > Milan BERKA píše v Út 11. 12. 2007 v 14:18 +0100: > > Dobrý den, > > používám Fedora 8, mám obavu, že se mi po různých upgrade nahromadilo v > > systému mnoho balíčků, které tam možná nejsou ani potřeba. > > Potřeboval bych něco, co by mi vypsalo závislosti balíčků v nějakém > > řetězci, kde bych mohl usoudit, které posloupnosti nejsou potřeba. > > > > Jinak funguji tak, že se mi zdá, že něco není potřeba a při odstranění > > YUMem to vypíše závislosti, které mne přivedou na myšlenku, že toto tedy > > odstranit nelze... Metoda pokus omyl a to je na dlouho... > > > > Dík za nápad. > > > > MB. > > > > _______________________________________________ > > Linux mailing list > > Linux na linux.cz > > http://www.linux.cz/mailman/listinfo/linux > -- > Martin Bodlák, Ostrava > mailto:bodlak na email.cz > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > > From petr.balas na gmail.com Wed Dec 12 12:06:57 2007 From: petr.balas na gmail.com (=?UTF-8?Q?Petr_Bal=C3=A1=C5=A1?=) Date: Wed, 12 Dec 2007 12:06:57 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <200712120934.lBC9YXQN011624@merlin.fonet.cz> References: <20071212103052.2b758171@brian.englab.brq.redhat.com> <200712120934.lBC9YXQN011624@merlin.fonet.cz> Message-ID: <218cff750712120306y533aaa36n67361d1ac118c084@mail.gmail.com> On Dec 12, 2007 10:34 AM, Ing. Pavel PaJaSoft Janoušek wrote: > linux-bounces na linux.cz wrote: > > Co je to vlastně nativní velikost? Mám pocit, že je to pojem, který si > > Že by velikost adresní sběrnice? Proto sice bylo I80386 DX i SX, > přesto oba patřily mezi 32-bitové procesory, přestože SX byla "očesaná" > varianta právě (mimo jiné) v datové sběrnici... IMHO je nativni velikost takova velikost, pro kterou existuji instrukce. Aneb x64 umi jednou instrukci scitat, odcitat, nasobit a delit jak 32bit tak i 64bit cisla takze mozne nativni velikosti jsou 32bit i 64bit (a 16 a 8 :-)) -- Petr Baláš - petr.balas at gmail dot com From czechtony na strojvimp.cz Wed Dec 12 12:26:19 2007 From: czechtony na strojvimp.cz (Czechtony) Date: Wed, 12 Dec 2007 12:26:19 +0100 Subject: OT: Re: Linux na PC s 88MB RAM In-Reply-To: <200712111545.56396.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> Message-ID: <475FC55B.1040307@strojvimp.cz> Nejake sdramky a simmy se mi schovavaji v supliku, mohl bych Vam je poslat pod stromecek. Kolik a jakych slotu a pamet. modulu mate? Jinak, ja bych volil debian :-) CzT -- Milos Prudek napsal(a): > Potreboval bych dostat Linux na PC s 88MB RAM. PC ma celkem 96 MB RAM, ale 8 > MB je sdilena grafika. > > From PaJaSoft na FoNet.Cz Wed Dec 12 12:32:09 2007 From: PaJaSoft na FoNet.Cz (=?iso-8859-2?Q?Ing._Pavel_PaJaSoft_Janou=B9ek?=) Date: Wed, 12 Dec 2007 12:32:09 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <218cff750712120306y533aaa36n67361d1ac118c084@mail.gmail.com> Message-ID: <200712121131.lBCBV72q019934@merlin.fonet.cz> linux-bounces na linux.cz wrote: > delit jak 32bit tak i 64bit cisla takze mozne nativni velikosti jsou > 32bit i 64bit (a 16 a 8 :-)) Což platilo i v 16-bit architektuře, kde bylo sizeof(int)=2, stejně tak v 32-bit (alespoň Intel architektuře), kde bylo sizeof(int)=4... No nicméně velikosti zřejmě nejsou součástí normy (platit si ji nebudu, vycházím z jednoho z veřejně dostupných draftů) a norma pouze říká, že limity jsou definovány v limits.h A zde se pouze pro ANSI/ISO C99 eventuelně při __WORDSIZE 64 předefinovává typ LONG/ULONG/LLONG. ------------------------------------------------------------------- Ing. Pavel Janousek (PaJaSoft) FoNet, spol. s r. o. Technicka podpora, Intranet/Internet Za Kovárnou 1, 625 00 Brno E-mail: mailto:Janousek na FoNet.Cz Tel.: +420 5 4324 4749 WWW: http://WWW.FoNet.Cz/ E-mail: mailto:Info na FoNet.Cz ------------------------------------------------------------------- From sutr na valasske-laboratore.cz Wed Dec 12 12:35:30 2007 From: sutr na valasske-laboratore.cz (Zdenek Kaminski) Date: Wed, 12 Dec 2007 12:35:30 +0100 (CET) Subject: Ubuntu ve =?UTF-8?Q?firemn=C3=AD?= =?UTF-8?Q?s=C3=ADti.?= In-Reply-To: References: <475D312A.6070207@seznam.cz> <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> <475E310E.2080802@seznam.cz> Message-ID: On Tue, 11 Dec 2007, Matej Cepl wrote: > On 2007-12-11, 06:41 GMT, Petr "Qaxi" Klíma wrote: >> Sorry, ale RHEL 5.1 je jako vsechny RHEL distro na desktopu >> nepouzitelny FF 1.5, TB1.5, OO 2.0.4 Je zajimve, ze tohle bylo pouzitelne jeste pred rokem a ted uz je to nepouzitelne.. Z.K. -- Wallachian Laboratories? Freeride in UN*X systems... From cramers na seznam.cz Wed Dec 12 13:25:24 2007 From: cramers na seznam.cz (Cramer) Date: Wed, 12 Dec 2007 13:25:24 +0100 Subject: Transparentni ochrana Message-ID: <475FD334.2040409@seznam.cz> Zdravim, resili jste nekdo uz podobny problem? Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz na viry a spyware a podobny plebs., tak abych pokud mozno na klientskych stanicich nemusel konfigurovat zadnou ochranu (maximalne vymeneni IE za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o Windows stanice. To same bych potreboval pro firewall. (Aby na stanicich nemusel byt personal firewall). Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na Debian a Ubuntu, ale pokud existuje distribuce, ktera se timto primo zabyva...? Diky za tipy a za rady. cRam "Software is like sex, it's better when it's free" - Linus Torvalds From spam na nagano.cz Wed Dec 12 13:43:02 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Wed, 12 Dec 2007 13:43:02 +0100 (CET) Subject: Transparentni ochrana In-Reply-To: <475FD334.2040409@seznam.cz> References: <475FD334.2040409@seznam.cz> Message-ID: Urcite neco takoveho dodava Symantec jako komercni reseni. Je to zarizeni do racku, uvnitr podle vseho bezi nejaky linux. Jestli vas zajimaji detaily, tak vam muzu zjistit typ. Open source reseni neznam. Lada On Wed, 12 Dec 2007, Cramer wrote: > Zdravim, > > resili jste nekdo uz podobny problem? > > Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz > na viry a spyware a podobny plebs., > tak abych pokud mozno na klientskych stanicich nemusel konfigurovat > zadnou ochranu (maximalne vymeneni IE > za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o > Windows stanice. > > To same bych potreboval pro firewall. (Aby na stanicich nemusel byt > personal firewall). > > Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na > Debian a Ubuntu, ale pokud existuje distribuce, > ktera se timto primo zabyva...? > > Diky za tipy a za rady. > > cRam > > "Software is like sex, it's better when it's free" - Linus Torvalds > > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From xkenni na seznam.cz Wed Dec 12 13:47:27 2007 From: xkenni na seznam.cz (Filip Aujezdsky) Date: Wed, 12 Dec 2007 13:47:27 +0100 Subject: Transparentni ochrana In-Reply-To: References: <475FD334.2040409@seznam.cz> Message-ID: <475FD85F.9010305@seznam.cz> > Urcite neco takoveho dodava Symantec jako komercni reseni. Je to zarizeni > do racku, uvnitr podle vseho bezi nejaky linux. > Jestli vas zajimaji detaily, tak vam muzu zjistit typ. Open source reseni > neznam. > > Lada > > No, ja bych to rad postavil sam, jakozto OS reseni. Pokud mate nejake blizsi info o tom komercnim reseni, rad se na to podivam, ale kupovat to urcite nechci. cRam > On Wed, 12 Dec 2007, Cramer wrote: > > >> Zdravim, >> >> resili jste nekdo uz podobny problem? >> >> Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz >> na viry a spyware a podobny plebs., >> tak abych pokud mozno na klientskych stanicich nemusel konfigurovat >> zadnou ochranu (maximalne vymeneni IE >> za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o >> Windows stanice. >> >> To same bych potreboval pro firewall. (Aby na stanicich nemusel byt >> personal firewall). >> >> Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na >> Debian a Ubuntu, ale pokud existuje distribuce, >> ktera se timto primo zabyva...? >> >> Diky za tipy a za rady. >> >> cRam >> >> "Software is like sex, it's better when it's free" - Linus Torvalds >> >> >> _______________________________________________ >> Linux mailing list >> Linux na linux.cz >> http://www.linux.cz/mailman/listinfo/linux >> >> > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > From synek na pbtisk.cz Wed Dec 12 13:50:28 2007 From: synek na pbtisk.cz (Synek Miloslav) Date: Wed, 12 Dec 2007 13:50:28 +0100 Subject: Transparentni ochrana Message-ID: > Zdravim, ...taky zdravím > > resili jste nekdo uz podobny problem? ...resil, ale bohuzel, kompletni reseni mam ulozene v supliku hned vedle funkcniho prototypu perpetum mobile ... jinymi slovy, alespon dle meho nazoru: tudy ne, tudy cesta opravdu nevede. > > Potrebuju pred sit umistit router, ktery by mi filtroval > sitovy provoz na viry a spyware a podobny plebs., tak abych > pokud mozno na klientskych stanicich nemusel konfigurovat > zadnou ochranu (maximalne vymeneni IE za FFox a podobne > upravy.). Doplnim jeste, ze se jedna prevazne o Windows stanice. ...nejaka castecna reseni samozrejme ano (AV kontrola na mailserveru, pripadne http, ftp apod.- treba na proxy), ale nejak me nenapada, jak napriklad zkoumat sifrovane prenosy (treba ssl), jak zkoumat zaheslovane archivy prenasene pomoci ftp atd. atd. jinde, nez na cilovem klientu. > > To same bych potreboval pro firewall. (Aby na stanicich > nemusel byt personal firewall). > > Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem > zvykly na Debian a Ubuntu, ale pokud existuje distribuce, > ktera se timto primo zabyva...? ...tohle jiste problem neni, sam pouzivam Debian (jsem na nej zvykly), jinak mnoho spec. dister - smoothwall, mandrake snf ty mě napadly v tuhle chvili, ale bude jich jiste mnohem vic. S pozdravem Miloslav Synek ----------------------------------------------------------- Počítače jsou výborným pomocníkem při řešení těch problémů, které by bez nich vůbec neexistovaly...... From dobes na tes.eu Wed Dec 12 14:08:06 2007 From: dobes na tes.eu (Michal Dobes) Date: Wed, 12 Dec 2007 14:08:06 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <475FAA17.20207@sobriety.cz> References: <200712120842.lBC8gU70008413@merlin.fonet.cz> <475FAA17.20207@sobriety.cz> Message-ID: <475FDD36.1070408@tes.eu> Petr Klíma napsal(a): > Ing. Pavel PaJaSoft Janoušek wrote: >> Chcete říci, že __nativní__ velikost je v 64-bitovém CPU 32-bitové >> číslo? > > Skoro to tak vypada. Ted jsem si to overil na Opteronu, Core2 a Itaniu. > Diskuse, zda má být int na 64-bitovém CPU 32 nebo 64 je dána dvěma body: a) požadavky normy na jazyk C, b) datovým modelem, který používá daná implementace Cčka. ad a) zjednodušeně ANSI/ISO C norma říká, že musí existovat 4 datové typy se znaménkem (char/short/int/long) a 4 bez znaménka (patřičné unsigned char/short/int/long). Co se velikosti týká, tak podmínky zní, že int a short musí být alespoň 16 bitů velké. Dále je řečeno, že datový typ long by měl být minimálně velký jako int, ale nemá to být méně než 32 bitů. Je to bez ohledu na to, zda mám 32/64/666-bitový procesor. Pokud se podíváme na Céčko dle klasiků K&R, tak se předpokládá, že datový typ int je ten nejrychlejší, který je v daném CPU k dispozici, ANCI C toto nepotlačuje. ad b) To, kolik bitů bude mít v dané implementaci datový typ je pak dáno použitým datovým modelem. Dneska většina systémů pro 32-bitové stroje používá model ILP32 a pro 64-bitové stroje LP64. ILP32 - sizeof(int/long/void *)=4, LP64 - sizeof(int)=4 a sizeof(long/void *)=8. M. From czechtony na strojvimp.cz Wed Dec 12 14:47:11 2007 From: czechtony na strojvimp.cz (Czechtony) Date: Wed, 12 Dec 2007 14:47:11 +0100 Subject: Transparentni ochrana In-Reply-To: <475FD334.2040409@seznam.cz> References: <475FD334.2040409@seznam.cz> Message-ID: <475FE65F.90302@strojvimp.cz> Hlavni problem jsou uzivatele a jejich zachazeni se systemem. Jinak opravdu staci proxy, antivir, antispam, firewall gate. Na VMware strankach si vyberte nejaky virt. stroj venovany pozadavnkum. a inspirujte se :-) Ale hlavne rezat uzivatele a vychovavat je (pokud to jde). CzT -- Cramer napsal(a): > Zdravim, > > resili jste nekdo uz podobny problem? > > Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz > na viry a spyware a podobny plebs., > tak abych pokud mozno na klientskych stanicich nemusel konfigurovat > zadnou ochranu (maximalne vymeneni IE > za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o > Windows stanice. > > To same bych potreboval pro firewall. (Aby na stanicich nemusel byt > personal firewall). > > Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na > Debian a Ubuntu, ale pokud existuje distribuce, > ktera se timto primo zabyva...? > > Diky za tipy a za rady. > > cRam > > "Software is like sex, it's better when it's free" - Linus Torvalds > > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From qaxi na seznam.cz Wed Dec 12 14:50:00 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Wed, 12 Dec 2007 14:50:00 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw60gc8OtdGku?= In-Reply-To: References: <475D312A.6070207@seznam.cz> Message-ID: <475FE708.2050508@seznam.cz> Matej Cepl napsal(a): > On 2007-12-10, 12:29 GMT, Petr "Qaxi" Klíma wrote: > >> prozatím máme jak distro vybrané Ubuntu 7.10 s tím, že až vyjde >> 8.04 LTS tak na nej zupgradujeme a máme 3 roky pokoj ...) >> >> Vzhledem k tomu, že jsem vyrostl na RH (žádné RH distro nám na desktop >> nevyhovuje ....) tak budu v některých věcech trochu tápat. >> > > Čistě jenom ze zvědavosti -- proč ne CentOS? Měli byste pokoj na > sedm let ... :-)? Ve firemní síti by snad nemělo rozhodovat jak > cool ta distribuce je, ne? > > Matěj > > mno ... 1) mám CentOS 5.1 na desktopu, používám ho 5 dní v týdnu, 9 hodin denně už 4 roky (od verze CentOS 3.2). pro koncové už. opravdu není připraven. Mně na něm vyhovuje, že co funguje u mne, funguje i na serverech 2) CentOS 5.1 má sice "podporu" 7 let ... máte představu co bude v IT za 3 roky ? Já ne. A Jednou za tři roky napsat "apt-get dist-upgrade" neni tak moc ... v tomhle má RHEL závažný nedostatek .... 3) Ubuntu neni cool, je to "za...." (zatrachtilá) distribuce založená na "*.deb" balících (HUMOR) -1 bod - už třetí den bojujeme s vytvořením vlastního seedu (přeci nebudu na každý stroj sahat a spouštět postinstall script ...) -1 bod - popisy nastavení na doc.ubuntu.com jsou většinou pro 6* a na 7.10 nefungují -1 bod - balíčkovací systém který potřebuje nadstabu nadstavby abych zjistil "který nainstalovaný balík obsahuje soubor pam_ldap.so" (dpkg -> apt-get -> apt-file) to je unikátní přivětivost .... (zaplať Marx za rpm -> yum ) (já vím, že má mouchy, ale rychlost fakt neni všechno ...) -1 bod - neschopnost vytvořit "instalační otisk" současného systému (ano ... zapoměl jsem na hnusné RedHatí system-config-kickstart, ale to debianisti nepoužívaj, vědí proč, instalák ho sice načte, ale interpretuje asi tak 1/3 ... proč taky ... cool boys používají debconf-get-selections s přehlednou syntaxí ...) -0.01 bodu - ... a vůbec hrozně málo se to podobá distrům od RH ;-) (opět POKŘIVENÝ HUMOR) +1 bod - na desktopu vše funguje jak je očekáváno => plusové body vyhrávají, vítězem je UBUNTU 7.10 (s výhledem na 8.04 LTS) Na co jste se ptal ? -- Petr Klíma e-mail: qaxi na seznam.cz From spam na nagano.cz Wed Dec 12 15:00:03 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Wed, 12 Dec 2007 15:00:03 +0100 (CET) Subject: Transparentni ochrana In-Reply-To: <475FD85F.9010305@seznam.cz> References: <475FD334.2040409@seznam.cz> <475FD85F.9010305@seznam.cz> Message-ID: > No, ja bych to rad postavil sam, jakozto OS reseni. > Pokud mate nejake blizsi info o tom komercnim reseni, rad se na to > podivam, ale kupovat to urcite nechci. SGS 5420. Pry tomu bude za rok koncit podpora, tak spis neco novejsiho. Pres nekolik prostredniku jsem slysel chvalu na Juniper. Cena obou radove 100kKc. Tyhle informace predavam tak, jak jsem je dostal. Lada From qaxi na seznam.cz Wed Dec 12 15:50:14 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Wed, 12 Dec 2007 15:50:14 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw61zw610aS4=?= In-Reply-To: References: <475D312A.6070207@seznam.cz> <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> <475E310E.2080802@seznam.cz> Message-ID: <475FF526.1080306@seznam.cz> Zdenek Kaminski napsal(a): > On Tue, 11 Dec 2007, Matej Cepl wrote: > >> On 2007-12-11, 06:41 GMT, Petr "Qaxi" Klíma wrote: >>> Sorry, ale RHEL 5.1 je jako vsechny RHEL distro na desktopu >>> nepouzitelny FF 1.5, TB1.5, OO 2.0.4 > > Je zajimve, ze tohle bylo pouzitelne jeste pred rokem a ted uz je to > nepouzitelne.. Vývoj pane vývoj .... ty PC by měli alespoň 3 roky fungovat ... za tři roky bude i FF 2 pozadu ... tak proč si hned při startu uvázat kouli k noze ... -- Petr Klíma e-mail: qaxi na seznam.cz From bar na fi.muni.cz Wed Dec 12 15:55:53 2007 From: bar na fi.muni.cz (Ludek Bartek) Date: Wed, 12 Dec 2007 15:55:53 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712111855.29104.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> <200712111750.59204.ovlach@nanobyte.cz> <200712111855.29104.prudek@bvx.cz> Message-ID: <475FF679.4020506@fi.muni.cz> Kdyz nebudete spoustet nic, co nepotrebujete, pripadne si trosku pohrajete s konfiguraci modulu, tak by to mohlo bezet. Jinak na slabsi stroje byl vhodny Slackware. Samozrejme je nutne nahradit zrouty pameti, jako je napr. KDE/GNOME necim trosku odlehcenejsim (twm,fvwm2, enlightment, afterstep, ...). Stejne tak kdm/gdm nahradit za xdm. Pripadne slackware se da nahradit debianem (tomu ma stacit 48 mega). Ludek Bartek P.S. Pokud netrvate na Linuxu, tak napr. FreeBSD by na tom mohlo byt dost svizne. Milos Prudek wrote: >> Já na podobném počítači provozuju CentOS, ale je to router, takže bez >> Xek... Nevím jak na tom poběží X server :-( >> > > Beh X je bohuzel zasadni pozadavek. > > From pali na tmapy.cz Wed Dec 12 15:58:24 2007 From: pali na tmapy.cz (Pavel Lisy) Date: Wed, 12 Dec 2007 15:58:24 +0100 Subject: Ubuntu ve =?ISO-8859-1?Q?firemn=ED?= =?ISO-8859-1?Q?_s=EDti=2E?= In-Reply-To: <475FE708.2050508@seznam.cz> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> Message-ID: <1197471504.22987.18.camel@pali-pc.hk.tmapy.cz> "Petr \"Qaxi\" Klíma" píše v St 12. 12. 2007 v 14:50 +0100: > Matej Cepl napsal(a): > > On 2007-12-10, 12:29 GMT, Petr "Qaxi" Klíma wrote: > > > >> prozatím máme jak distro vybrané Ubuntu 7.10 s tím, že až vyjde > >> 8.04 LTS tak na nej zupgradujeme a máme 3 roky pokoj ...) > >> > >> Vzhledem k tomu, že jsem vyrostl na RH (žádné RH distro nám na desktop > >> nevyhovuje ....) tak budu v některých věcech trochu tápat. > >> > > > > Čistě jenom ze zvědavosti -- proč ne CentOS? Měli byste pokoj na > > sedm let ... :-)? Ve firemní síti by snad nemělo rozhodovat jak > > cool ta distribuce je, ne? > > > > Matěj > > > > > mno ... > > 1) mám CentOS 5.1 na desktopu, používám ho 5 dní v týdnu, 9 hodin denně > už 4 roky (od verze CentOS 3.2). > pro koncové už. opravdu není připraven. > Mně na něm vyhovuje, že co funguje u mne, funguje i na serverech > > 2) CentOS 5.1 má sice "podporu" 7 let ... máte představu co bude v IT za > 3 roky ? Já ne. A Jednou za tři roky napsat "apt-get dist-upgrade" neni > tak moc ... v tomhle má RHEL závažný nedostatek .... No s Ubuntu nepracuji tak moc jako s Fedorou (7 dní v týdnu, více než 8h denně :-) ale když jsem toto "apt-get dist-upgrade" pustil na Ubuntu 7.04 (nevím jak moc velký provblém je, že je to varianta CE), tak mi to řeklo, že tato volba není podporována. Na fedoře dělám občas dist upgrade takto: rpm -Uvh \ http://nejaky-server/cesta/fedora-release-nejnovejsiverze.atd.rpm yum update před tím je vhodné vyházet balíčky z jiných repository, protože ty mají zpoždění ve výrobě aktuálních RPM (často jedu update v době fedora TEST2 nebo TEST3) Nevím, jak je na tom ubuntu s upgrady (jak moc jsou odvážné), ale jeden známý má pár stanic na fedoře a updaty mu to dost často celkem rozhodí. Proto mi přijde, že je lepší být trochu konzervativnější. Pavel From lists_mk na wujiman.net Wed Dec 12 15:44:11 2007 From: lists_mk na wujiman.net (Martin Kraus) Date: Wed, 12 Dec 2007 15:44:11 +0100 Subject: autentifikace postfix/cyrus pres mysql Message-ID: <20071212144411.GA7829@finrod> zdravim, mam mailserver cyrus+postfix, kde se oba autentifikuji pomoci sasl pres sasldb. ted bych ovsem potreboval zmigrovat uzivatele do mysql. koukal jsem, ze jsou dve cesty. saslauthd + pam nebo sasl-sql plugin primo do saslu. Co me trapi je, ze bych rad, kdyz uz budu kolem toho behat, nejak do autentifikacniho procesu integroval kratkodobe blokovani uctu pri nekolika nepodarenych autentifikacich v kratke dobe. To by melo jit pres saslauthd + pam_tally. saslauthd ovsem podminuje pouzivani plaintext hesel, coz se mi tolik nelibi i kdyz spolu s ssl by to nemel byt problem a outlooky stejne nic jineho neumi. sasl-sql me pripada lepe integrovane do saslu, mely by se dat pouzit ostatni pluginy ze saslu ovsem tam mne nenapada, jak resit blokovani uctu. nevi nekdo, jestli neexistuje nejaka dalsi cesta, jak spolu autentifikovat cyrus+postfix do mysql a zaroven kratkodobe blokovat ucty pri nekolika nepodarenych autentifikacich? diky za pomoc mk From prudek na bvx.cz Wed Dec 12 16:47:48 2007 From: prudek na bvx.cz (Milos Prudek) Date: Wed, 12 Dec 2007 16:47:48 +0100 Subject: OT: Re: Linux na PC s 88MB RAM In-Reply-To: <475FC55B.1040307@strojvimp.cz> References: <200712111545.56396.prudek@bvx.cz> <475FC55B.1040307@strojvimp.cz> Message-ID: <200712121647.48304.prudek@bvx.cz> On Wednesday 12 of December 2007 12:26:19 Czechtony wrote: > Nejake sdramky a simmy se mi schovavaji v supliku, mohl bych Vam je > poslat pod stromecek. > Kolik a jakych slotu a pamet. modulu mate? No, to je necekana nabidka. Diky! Zkusim nejdriv ty ostatni rady. Beru to jako vyzvu zda to dokazu v tech 88MB. Ten pocitac je nejen stary ale i nekvalitni, pokusy prokazou zda si vubec Linux zaslouzi... -- Milos Prudek From prudek na bvx.cz Wed Dec 12 16:52:14 2007 From: prudek na bvx.cz (Milos Prudek) Date: Wed, 12 Dec 2007 16:52:14 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <1197444069.3135.6.camel@lisicky-jiri.opt.cd.cz> References: <200712111545.56396.prudek@bvx.cz> <200712111735.47944.prudek@bvx.cz> <1197444069.3135.6.camel@lisicky-jiri.opt.cd.cz> Message-ID: <200712121652.14833.prudek@bvx.cz> > Na testování se může ten image bootovat z diskety. Pokud by tam zůstal > harddisk, tak z něj. Nebo z CD či USB. Harddisk tam zcela jiste zustane. Nemam duvod ho vytahovat. Ve skutecnosti tam jsou dva fyzicke harddisky. Ma LTSP nejakou vyhodu proti vsem ostatnim Linuxum, kdyz to bude jen pro dalkove X sessions ale s bootem z harddisku? -- Milos Prudek From xschmi00 na stud.feec.vutbr.cz Wed Dec 12 16:54:01 2007 From: xschmi00 na stud.feec.vutbr.cz (Michal Schmidt) Date: Wed, 12 Dec 2007 16:54:01 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw60gc8OtdGku?= In-Reply-To: <1197471504.22987.18.camel@pali-pc.hk.tmapy.cz> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> <1197471504.22987.18.camel@pali-pc.hk.tmapy.cz> Message-ID: <20071212165401.72b1737c@brian.englab.brq.redhat.com> On Wed, 12 Dec 2007 15:58:24 +0100 Pavel Lisy wrote: > Na fedoře dělám občas dist upgrade takto: > rpm -Uvh \ > http://nejaky-server/cesta/fedora-release-nejnovejsiverze.atd.rpm > yum update Taky upgraduju Fedoru yumem. Je dobré předtím kouknout na http://fedoraproject.org/wiki/YumUpgradeFaq Michal From prudek na bvx.cz Wed Dec 12 16:55:47 2007 From: prudek na bvx.cz (Milos Prudek) Date: Wed, 12 Dec 2007 16:55:47 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <20071212100944.GB27411@nagano.cz> References: <200712111545.56396.prudek@bvx.cz> <20071212100944.GB27411@nagano.cz> Message-ID: <200712121655.47704.prudek@bvx.cz> > Nedávno asi před týdnem jsem naistaloval debian na noťas s 96 MB RAM. > Nevím jestli to má sdílenou grafiku ale pravděpodobně nikoliv. Inu > plouží se to. Docela využívám konzole, když to jde z důvodu rychlosti. > Dají se tam opužívat i oofice, když člověk přetrpí delší start. Jak jsem uz psal, veskere aplikace budou spousteny dalkove, vcetne ooffice... vsechny aplikace pobezi na PC s 1500MB RAM... takze RAM na tom starem PC bude slouzit opravdu jen pro boot zakladniho operacniho systemu a X Window v rozliseni 1024x768x32 -- Milos Prudek From sutr na valasske-laboratore.cz Wed Dec 12 16:56:43 2007 From: sutr na valasske-laboratore.cz (Zdenek Kaminski) Date: Wed, 12 Dec 2007 16:56:43 +0100 (CET) Subject: =?utf-8?B?UmU6IFVidW50dSB2ZSBmaXJlbW7DrXPDrXRpLg==?= In-Reply-To: <475FF526.1080306@seznam.cz> References: <475D312A.6070207@seznam.cz> <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> <475E310E.2080802@seznam.cz> <475FF526.1080306@seznam.cz> Message-ID: <25489.195.212.29.171.1197475003.squirrel@www.freemusic.cz> Dne 12 Prosinec 2007, 15:50, "Petr \"Qaxi\" Klíma" napsal(a): >> Je zajimve, ze tohle bylo pouzitelne jeste pred rokem a ted uz je to >> nepouzitelne.. > Vývoj pane vývoj .... nepochopil, nevadi. zk From bodlak na email.cz Wed Dec 12 17:01:11 2007 From: bodlak na email.cz (Martin =?ISO-8859-1?Q?Bodl=E1k?=) Date: Wed, 12 Dec 2007 17:01:11 +0100 Subject: Odp:Re: Existuje =?UTF-8?Q?n=C4=9Bco=2C?= co by mi pomohlo odstranit =?UTF-8?Q?nepot=C5=99ebn=C3=A9?= =?UTF-8?Q?_bal=C3=AD=C4=8Dky?= v =?ISO-8859-1?Q?syst=E9mu=3F?= In-Reply-To: <826.1626-16214-453163153-1197456762@seznam.cz> References: <826.1626-16214-453163153-1197456762@seznam.cz> Message-ID: <1197475271.5648.35.camel@bodli.net> To nevím, ale Mandriva taky používá RPM. M. Jan Řezníček píše v St 12. 12. 2007 v 11:52 +0100: > Jé a neexistuje něco podobného pro Mandrivu? Nebo jak by se to dalo řešit? > Díky > Honza > > > ------------ Původní zpráva ------------ > > Od: Martin Bodlák > > Předmět: Re: Existuje něco, co by mi pomohlo odstranit nepotřebné balíčky v > > systému? > > Datum: 11.12.2007 20:06:59 > > ---------------------------------------- > > > > Já jsem ve starších časech na fedoře používal skript rpmorphan.pl, ale > > už nevím, odkud to bylo; Google mi našel jenom > > http://rpmorphan.sourceforge.net/ a nevím, jestli je to správná adresa. > > > > M. > > > > > > Milan BERKA píše v Út 11. 12. 2007 v 14:18 +0100: > > > Dobrý den, > > > používám Fedora 8, mám obavu, že se mi po různých upgrade nahromadilo v > > > systému mnoho balíčků, které tam možná nejsou ani potřeba. > > > Potřeboval bych něco, co by mi vypsalo závislosti balíčků v nějakém > > > řetězci, kde bych mohl usoudit, které posloupnosti nejsou potřeba. > > > > > > Jinak funguji tak, že se mi zdá, že něco není potřeba a při odstranění > > > YUMem to vypíše závislosti, které mne přivedou na myšlenku, že toto tedy > > > odstranit nelze... Metoda pokus omyl a to je na dlouho... > > > > > > Dík za nápad. > > > > > > MB. > > > > > > _______________________________________________ > > > Linux mailing list > > > Linux na linux.cz > > > http://www.linux.cz/mailman/listinfo/linux > > -- > > Martin Bodlák, Ostrava > > mailto:bodlak na email.cz > > > > _______________________________________________ > > Linux mailing list > > Linux na linux.cz > > http://www.linux.cz/mailman/listinfo/linux > > > > > > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux -- Martin Bodlák, Ostrava mailto:bodlak na email.cz From talk na advokati.biz Wed Dec 12 17:12:59 2007 From: talk na advokati.biz (Daniel Hrbac) Date: Wed, 12 Dec 2007 17:12:59 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw60gc8OtdGku?= In-Reply-To: <1197471504.22987.18.camel@pali-pc.hk.tmapy.cz> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> <1197471504.22987.18.camel@pali-pc.hk.tmapy.cz> Message-ID: <4760088B.60807@advokati.biz> Pavel Lisy napsal(a): > Na fedoře dělám občas dist upgrade takto: > rpm -Uvh \ > http://nejaky-server/cesta/fedora-release-nejnovejsiverze.atd.rpm > yum update > > před tím je vhodné vyházet balíčky z jiných repository, protože ty mají > zpoždění ve výrobě aktuálních RPM (často jedu update v době fedora TEST2 > nebo TEST3) > > > Nevím, jak je na tom ubuntu s upgrady (jak moc jsou odvážné), ale jeden > známý má pár stanic na fedoře a updaty mu to dost často celkem rozhodí. > Proto mi přijde, že je lepší být trochu konzervativnější. > > Pavel když už jsme u toho, tak když vyšla verze 7.10 tak se mě v icontrayi objevila takova oranzova ikona a pak čudlitko, ktere rikalo neco jako upgrade na novou verzi. tak jsem na to kliknul a ono si to cosi stahlo a bylo to za hodku nebo dve hotove a misto 7.04 tak byl najednou 7.10. to co pisete nahore, teda jak to ma vic nez jeden radek a na nem vic nez tri slova tak uz to neni ono. -- Daniel Hrbac talk na advokati.biz skype: hrbacdaniel From max na czerny.cz Wed Dec 12 19:08:14 2007 From: max na czerny.cz (Maxim Cerny) Date: Wed, 12 Dec 2007 19:08:14 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <20071211080911.GA875@panelnet.cz> References: <475D7636.8010008@czerny.cz> <20071211080911.GA875@panelnet.cz> Message-ID: <4760238E.6000002@czerny.cz> > A co od te krabicky chcete - Gbit?, pocet portu, jen router nebo i > traffic shaping?, spotreba?, velikost?... > Chtel bych z toho udelat postovni server (postfix+amavisd) + nejaky lightweight sql server. M. Cerny From Petr na Kristof.cz Wed Dec 12 20:36:41 2007 From: Petr na Kristof.cz (=?ISO-8859-2?Q?Petr_Kri=B9tof?=) Date: Wed, 12 Dec 2007 20:36:41 +0100 Subject: Asterisk - propojeni dvou klasickych ustreden pres asterisk In-Reply-To: References: Message-ID: Kovář Jan wrote: > > Nepouzivate prosim nekdo Asterisk? Mam dve pobocky. Jednu v Praze, > druhou v Bratislave. V kazde pobocce mam Siemens HiPath, ale ruzne > typy a verze. Chci je nejak propojit, abychom nemuseli platit, ze > mezinarodni volani. Na to je snad Asterisk zbytecny. Staci poridit VOIP adaptery typu Linksys SPA2102, pripojit je na volne linky a nakrmit do nich bud cisla od jednoho operatora nebo zapnout primo IP dialing. Pak to volate na ustredne jako klasickou extension. pk From pali na tmapy.cz Wed Dec 12 21:05:13 2007 From: pali na tmapy.cz (Pavel Lisy) Date: Wed, 12 Dec 2007 21:05:13 +0100 Subject: Ubuntu ve =?ISO-8859-1?Q?firemn=ED?= =?ISO-8859-1?Q?_s=EDti=2E?= In-Reply-To: <4760088B.60807@advokati.biz> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> <1197471504.22987.18.camel@pali-pc.hk.tmapy.cz> <4760088B.60807@advokati.biz> Message-ID: <1197489913.5478.25.camel@parents-desktop.lisilan.cz> Daniel Hrbac píše v St 12. 12. 2007 v 17:12 +0100: > > když už jsme u toho, tak když vyšla verze 7.10 tak se mě v > icontrayi objevila takova oranzova ikona a pak čudlitko, ktere > rikalo neco jako upgrade na novou verzi. tak jsem na to kliknul a > ono si to cosi stahlo a bylo to za hodku nebo dve hotove a > misto 7.04 tak byl najednou 7.10. No já jsem na to taky kliknul a ono to řeklo, že to nejde. Protože Ubuntu moc neznám, bral jsem to jako fakt. Ale asi je problém, že mám Ubuntu CE, tak mám prostě smůlu. Pavel From lisicky na opt.cd.cz Thu Dec 13 12:33:17 2007 From: lisicky na opt.cd.cz (Jiri Lisicky) Date: Thu, 13 Dec 2007 12:33:17 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712121652.14833.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> <200712111735.47944.prudek@bvx.cz> <1197444069.3135.6.camel@lisicky-jiri.opt.cd.cz> <200712121652.14833.prudek@bvx.cz> Message-ID: <1197545598.3149.15.camel@lisicky-jiri.opt.cd.cz> Milos Prudek píše v St 12. 12. 2007 v 16:52 +0100: > > Na testování se může ten image bootovat z diskety. Pokud by tam zůstal > > harddisk, tak z něj. Nebo z CD či USB. > > Harddisk tam zcela jiste zustane. Nemam duvod ho vytahovat. > > Ve skutecnosti tam jsou dva fyzicke harddisky. > > Ma LTSP nejakou vyhodu proti vsem ostatnim Linuxum, kdyz to bude jen pro > dalkove X sessions ale s bootem z harddisku? Až rozběháte to bootování ze sítě, nemusí se nic instalovat na ten cílový počítač. Ten slabý počítač (ono v těch X je to kdo je server a kdo klient obrácené ;-) ) si připojí všechno přes NFS. Tudíž máte všechno pouze na jednom místě a v jedné verzi. Je to v podstatě úžasné - máte "prázdný" počítač s plnohodným systémem fungujícím ze sítě. Našel jsem nějaký seriálek na http://www.edunix.cz/tech/ltsp/serial_ai/ From findrik na gmail.com Thu Dec 13 12:37:50 2007 From: findrik na gmail.com (Rado Findrik) Date: Thu, 13 Dec 2007 12:37:50 +0100 Subject: redirect port Message-ID: zdravim, oblubena tema este raz :) mam apache s virtual hosts s neverejnou IP za fw. pomocou DNAT je pristupny z internetu. tu je vsetko ok. kôli bezpecnosti som spustil apache na porte 10888. ked zadam do prehliadaca http://adr.sk:10888 nedokazem sa na neho dostat z internetu. dostanem sa ne neho IBA z LAN. na fw mam pridane tieto pravidla: iptables -t nat -A PREROUTING -i $INET_IFACE -p TCP --dport 10888 \ -j DNAT --to-destination 192.168.1.253:10888 iptables -A FORWARD -p TCP -m state --state NEW -d 192.168.1.253 --dport 10888 -j LOG_ACCEPT nefunguje ani toto: http://adr.sk iptables -t nat -A PREROUTING -i $INET_IFACE -p TCP --dport 80 \ -j DNAT --to-destination 192.168.1.253:10888 iptables -A FORWARD -p TCP -m state --state NEW -d 192.168.1.253 --dport 80 -j LOG_ACCEPT neviem si rady. kde robim chybu? dik. --rf From dast na panelnet.cz Thu Dec 13 12:45:56 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Thu, 13 Dec 2007 12:45:56 +0100 Subject: redirect port In-Reply-To: References: Message-ID: <20071213114556.GA30813@panelnet.cz> On Thu, Dec 13, 2007 at 12:37:50PM +0100, Rado Findrik wrote: > > kôli bezpecnosti som spustil apache na porte 10888. > ked zadam do prehliadaca http://adr.sk:10888 nedokazem > sa na neho dostat z internetu. > dostanem sa ne neho IBA z LAN. na fw mam pridane tieto pravidla: > > iptables -t nat -A PREROUTING -i $INET_IFACE -p TCP --dport 10888 \ > -j DNAT --to-destination 192.168.1.253:10888 > > iptables -A FORWARD -p TCP -m state --state NEW -d 192.168.1.253 --dport > 10888 -j LOG_ACCEPT > A mate k tomu jeste ESTABLISHED -j accept? Nezustalo v tabulkach forward a nat/prerouting nejake smeti? (iptables -t nat -L) -- Dalibor Straka From findrik na gmail.com Thu Dec 13 12:56:53 2007 From: findrik na gmail.com (Rado Findrik) Date: Thu, 13 Dec 2007 12:56:53 +0100 Subject: redirect port In-Reply-To: <20071213114556.GA30813@panelnet.cz> References: <20071213114556.GA30813@panelnet.cz> Message-ID: ano, mam: iptables -A FORWARD -i INET_IFACE -o LAN_IFACE \ -m state --state ESTABLISHED,RELATED -j LOG_ACCEPT a tak podobne v INPUT. tabulku cistim pred kazdym nahranim pravidiel, mazem lokalne chainy. > A mate k tomu jeste ESTABLISHED -j accept? > Nezustalo v tabulkach forward a nat/prerouting nejake smeti? > (iptables -t nat -L) > > -- Dalibor Straka > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From findrik na gmail.com Thu Dec 13 12:59:08 2007 From: findrik na gmail.com (Rado Findrik) Date: Thu, 13 Dec 2007 12:59:08 +0100 Subject: redirect port In-Reply-To: References: <20071213114556.GA30813@panelnet.cz> Message-ID: oprava. tato cast funguje, ale to neriesi môj problem: iptables -t nat -A PREROUTING -i $INET_IFACE -p TCP --dport 80 \ -j DNAT --to-destination 192.168.1.253:10888 iptables -A FORWARD -p TCP -m state --state NEW -d 192.168.1.253 --dport 80 -j LOG_ACCEPT --rf From tomas.nemec na atlas.cz Thu Dec 13 13:11:16 2007 From: tomas.nemec na atlas.cz (=?iso-8859-2?q?Tom=E1=B9_N=ECmec?=) Date: Thu, 13 Dec 2007 13:11:16 +0100 Subject: Odp:Re: Existuje =?iso-8859-2?q?n=ECco?=, co by mi pomohlo odstranit =?iso-8859-2?q?nepot=F8ebn=E9_bal=ED=E8ky_v?= =?iso-8859-2?q?_syst=E9mu=3F?= In-Reply-To: <1197475271.5648.35.camel@bodli.net> References: <826.1626-16214-453163153-1197456762@seznam.cz> <1197475271.5648.35.camel@bodli.net> Message-ID: <200712131311.16891.tomas.nemec@atlas.cz> Aha a Já pořád používám ...urpme... No že bych přešel jen k "rpm"...abych to měl složitější... :-) co třeba "man urpme" Tomáš Němec Dne Wednesday 12 of December 2007 17:01:11 Martin Bodlák napsal(a): > To nevím, ale Mandriva taky používá RPM. > M. > > Jan Řezníček píše v St 12. 12. 2007 v 11:52 +0100: > > Jé a neexistuje něco podobného pro Mandrivu? Nebo jak by se to dalo > > řešit? Díky > > Honza From prudek na bvx.cz Thu Dec 13 14:05:11 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 14:05:11 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <1197545598.3149.15.camel@lisicky-jiri.opt.cd.cz> References: <200712111545.56396.prudek@bvx.cz> <200712121652.14833.prudek@bvx.cz> <1197545598.3149.15.camel@lisicky-jiri.opt.cd.cz> Message-ID: <200712131405.11245.prudek@bvx.cz> > Až rozběháte to bootování ze sítě, nemusí se nic instalovat na ten > cílový počítač. Ten slabý počítač (ono v těch X je to kdo je server a No, nemusím tam nic instalovat, to je pravda. Jenže nemám žádného známého který by mi vypálil EPROM, a celé to zní velmi pracně. Je to sice úžasné ale jen v konkrétní situaci - např. když máte takových 20 a více bezdiskových stanic tak je to bezkonkurenční řešení - vím to, sám jsem spravoval 150 textových terminálů - bezdiskových, připojených sériovou linkou 115200 baud. Když mám ale na starosti jen 3 počítače v síti v jednom domě, tak tam tu výhodu nevidím. Naopak si myslím že z pevného disku to bude rychleji bootovat, ne? Klidně bych zkusil to bezdiskové řešení, když někde v bazaru seženu síťovou kartu s EPROM, i když vlastně ani nevím jak ji poznám - nevím jak ten šváb vypadá a co je na něm napsané, a prodavač v bazaru to určitě nebude vědět :-) -- Milos Prudek From prudek na bvx.cz Thu Dec 13 14:07:35 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 14:07:35 +0100 Subject: Ubuntu ve =?iso-8859-2?q?firemn=EDs=EDti=2E?= In-Reply-To: References: <475D312A.6070207@seznam.cz> Message-ID: <200712131407.35336.prudek@bvx.cz> > Čistě jenom ze zvědavosti -- proč ne CentOS? Měli byste pokoj na > sedm let ... :-)? Ve firemní síti by snad nemělo rozhodovat jak > cool ta distribuce je, ne? No já bych řekl že asi proto, že na Desktop je 3 roky tak akorát. Sedm let je už moc dlouho. -- Milos Prudek From prudek na bvx.cz Thu Dec 13 14:15:10 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 14:15:10 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <1197545598.3149.15.camel@lisicky-jiri.opt.cd.cz> References: <200712111545.56396.prudek@bvx.cz> <200712121652.14833.prudek@bvx.cz> <1197545598.3149.15.camel@lisicky-jiri.opt.cd.cz> Message-ID: <200712131415.10955.prudek@bvx.cz> > Našel jsem nějaký seriálek na http://www.edunix.cz/tech/ltsp/serial_ai/ Díky za ten odkaz - já to sice nevyužiju, radši si přečtu nejaktuálnější anglickou dokumentaci - ale mnoha lidem se dokumentace v češtině může hodit. -- Milos Prudek From janhron.c na gmail.com Thu Dec 13 14:11:32 2007 From: janhron.c na gmail.com (janhron.c na gmail.com) Date: Thu, 13 Dec 2007 05:11:32 -0800 (PST) Subject: redirect port References: Message-ID: <2d8d9e04-7e73-4225-b72c-165dcc162d3b@a35g2000prf.googlegroups.com> Musíte mít povolené pesměrování v tabulce PREROUTING i FORWARD. Takto: $IPTABLES -t nat -A PREROUTING -p tcp -d $INET_IP --dport 10888 -j DNAT --to 192.168.1.253:10888 $IPTABLES -A FORWARD -i $INET_IFACE -o $LAN1_IFACE -p tcp -d 192.168.1.253 --dport 10888 -j ACCEPT čenda From karel.dudasek na vghur.army.cz Thu Dec 13 14:27:40 2007 From: karel.dudasek na vghur.army.cz (Karel Dudasek) Date: Thu, 13 Dec 2007 14:27:40 +0100 (CET) Subject: Linux na PC s 88MB RAM In-Reply-To: <200712131405.11245.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> <200712121652.14833.prudek@bvx.cz> <1197545598.3149.15.camel@lisicky-jiri.opt.cd.cz> <200712131405.11245.prudek@bvx.cz> Message-ID: On Thu, 13 Dec 2007, Milos Prudek wrote: > Když mám ale na starosti jen 3 počítače v síti v jednom domě, tak tam tu > výhodu nevidím. Naopak si myslím že z pevného disku to bude rychleji > bootovat, ne? > > Klidně bych zkusil to bezdiskové řešení, když někde v bazaru seženu síťovou > kartu s EPROM, i když vlastně ani nevím jak ji poznám - nevím jak ten šváb > vypadá a co je na něm napsané, a prodavač v bazaru to určitě nebude vědět :-) Obvykle v bazaru je najdete jen s patici. EPROM maji na sobe obcas napsano neco ve stylu *27[EF][0-9]* (jednoduchy regexp). A jako castecna nahrada muze byt i floppy disk nebo jen zavadec ulozeny na disku. I kdyz nektere sitove karty na MB uz maji tuto cast jako PXE rovnou v BIOSu. Karel Dudasek From prudek na bvx.cz Thu Dec 13 19:07:01 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 19:07:01 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712112123.19269.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> <475EDC5E.1060003@advokati.biz> <200712112123.19269.prudek@bvx.cz> Message-ID: <200712131907.01783.prudek@bvx.cz> On Tuesday 11 of December 2007 21:23:19 Milos Prudek wrote: > > pridat parametr ramdisk_size=16000 > > Zkusim to s timhle parametrem. Tak jsem to zkusil a vysledek byl: Objevil se obrazek tucnaka v levem hornim rohu a hlaska: kernel panic: VFS: Unable to mount root fs on 03:02 -- Milos Prudek From prudek na bvx.cz Thu Dec 13 20:00:56 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 20:00:56 +0100 Subject: Linux na PC s 88MB RAM In-Reply-To: <200712131907.01783.prudek@bvx.cz> References: <200712111545.56396.prudek@bvx.cz> <200712112123.19269.prudek@bvx.cz> <200712131907.01783.prudek@bvx.cz> Message-ID: <200712132000.56718.prudek@bvx.cz> > Tak jsem to zkusil a vysledek byl: UZ TO FUNGUJE. Nahral jsem "syslinux" verzi Damn Small Linux 4.1, coz je verze urcena pro stare pocitace. Takze ten stary pocitac v pohode provozuje Live CD DSL 4.1. Fantasticke! -- Milos Prudek From prudek na bvx.cz Thu Dec 13 20:09:39 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 20:09:39 +0100 Subject: cannot connect to X server Message-ID: <200712132009.39450.prudek@bvx.cz> Zkousim pristup ke vzdalenemu X clientu a nedari se. Prihlasim se v terminalu k vzdalenemu PC, zadam: export DISPLAY=192.168.1.2:0.0 a zkusim pustit rxvt: can't open display 192.168.1.2:0.0 a zkusim kcalc: cannot connect to X server 192.168.1.2:0.0 Pokud se k vzdalenemu PC prihlasim pomoci ssh -X (cili se zapnutym forwardovanim X pomoci ssh) tak vsechno funguje. Radeji bych ale pouzival vyse uvedeny postup, je to o hodne rychlejsi bez sifrovani ssh. Ten vyse uvedeny postup mi funguje dobre pro Cygwin/X ve Windows XP. Predpokladam ze je to otazka nastaveni X serveru. Pouzivam Damn Small Linux na strane X serveru. V tomto emailu je (doufejme) pouzita spravna (cili "obracena") terminologie pro "X client" a "X server". -- Milos Prudek From slavek.banko na axis.cz Thu Dec 13 20:14:07 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Thu, 13 Dec 2007 20:14:07 +0100 Subject: cannot connect to X server In-Reply-To: <200712132009.39450.prudek@bvx.cz> References: <200712132009.39450.prudek@bvx.cz> Message-ID: <200712132014.07317.slavek.banko@axis.cz> Musíte si na klienta doručit správný "klíč" z Xserveru - viz xauth. Slávek -- Dne čtvrtek 13 prosinec 2007 20:09 Milos Prudek napsal(a): > Zkousim pristup ke vzdalenemu X clientu a nedari se. Prihlasim se v > terminalu k vzdalenemu PC, zadam: > export DISPLAY=192.168.1.2:0.0 > a zkusim pustit rxvt: > can't open display 192.168.1.2:0.0 > a zkusim kcalc: > cannot connect to X server 192.168.1.2:0.0 > > Pokud se k vzdalenemu PC prihlasim pomoci ssh -X (cili se zapnutym > forwardovanim X pomoci ssh) tak vsechno funguje. Radeji bych ale pouzival > vyse uvedeny postup, je to o hodne rychlejsi bez sifrovani ssh. > > Ten vyse uvedeny postup mi funguje dobre pro Cygwin/X ve Windows XP. > Predpokladam ze je to otazka nastaveni X serveru. Pouzivam Damn Small Linux > na strane X serveru. > > V tomto emailu je (doufejme) pouzita spravna (cili "obracena") terminologie > pro "X client" a "X server". From petr.klima na sobriety.cz Thu Dec 13 21:27:16 2007 From: petr.klima na sobriety.cz (=?ISO-8859-2?Q?Petr_Kl=EDma?=) Date: Thu, 13 Dec 2007 21:27:16 +0100 Subject: cannot connect to X server In-Reply-To: <200712132009.39450.prudek@bvx.cz> References: <200712132009.39450.prudek@bvx.cz> Message-ID: <476195A4.9090501@sobriety.cz> Zkuste se podivat, jestli je neco v syslogu, pripadne v Xorg logu. Taky se podivejte, jestli mate vubec povolene pripojeni k X serveru (nesmi byt spusteny s parametrem -nolisten). No a pak uz by byl cas na ten xauth... Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From prudek na bvx.cz Thu Dec 13 22:10:18 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 22:10:18 +0100 Subject: cannot connect to X server In-Reply-To: <476195A4.9090501@sobriety.cz> References: <200712132009.39450.prudek@bvx.cz> <476195A4.9090501@sobriety.cz> Message-ID: <200712132210.18209.prudek@bvx.cz> On Thursday 13 of December 2007 21:27:16 Petr Klíma wrote: > Zkuste se podivat, jestli je neco v syslogu, pripadne v Xorg logu. Taky > se podivejte, jestli mate vubec povolene pripojeni k X serveru (nesmi > byt spusteny s parametrem -nolisten). No a pak uz by byl cas na ten No ale kdyz to funguje pokud pouziju "ssh -X", jak jsem psal, a "ssh -X" je jen forwardovani na port 6000, tak to znamena ze PC s X serverem nasloucha na portu, ne? -- Milos Prudek From prudek na bvx.cz Thu Dec 13 22:15:30 2007 From: prudek na bvx.cz (Milos Prudek) Date: Thu, 13 Dec 2007 22:15:30 +0100 Subject: cannot connect to X server In-Reply-To: <200712132014.07317.slavek.banko@axis.cz> References: <200712132009.39450.prudek@bvx.cz> <200712132014.07317.slavek.banko@axis.cz> Message-ID: <200712132215.30665.prudek@bvx.cz> On Thursday 13 of December 2007 20:14:07 Slávek Banko wrote: > Musíte si na klienta doručit správný "klíč" z Xserveru - viz xauth. Nestaci neco jako "xhost +localhost"? -- Milos Prudek From tomas_prosek na volny.cz Thu Dec 13 23:12:51 2007 From: tomas_prosek na volny.cz (tomas_prosek na volny.cz) Date: Thu, 13 Dec 2007 22:12:51 +0000 (UTC) Subject: Postfix a spam Message-ID: Zdravim ve spolek, mam na serveru postfix a spamassassin, ktery uz celkem slusne oznacuje spamy, a chtel bych donutit postfix, aby oznaceny spam neposilal uzivatelum do schranek, ale do jedne urcene schranky. Poradi nekdo, jak na to? From slavek.banko na axis.cz Thu Dec 13 23:14:42 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Thu, 13 Dec 2007 23:14:42 +0100 Subject: cannot connect to X server In-Reply-To: <200712132210.18209.prudek@bvx.cz> References: <200712132009.39450.prudek@bvx.cz> <476195A4.9090501@sobriety.cz> <200712132210.18209.prudek@bvx.cz> Message-ID: <200712132314.43034.slavek.banko@axis.cz> Když použijete "ssh -X", tak se jednak na druhou stranu klíč doručí automaticky, a ssh pak zajistí předávání portu a ten na straně klienta předává pakety lokálně - tedy Xka mohou naslouchat na localhostu. Pokud má být přístup na Xka možný vzdáleně, tak musíte jednak Xka nechat naslouchat i na síťovém rozhraní a pak buď použít xhost +_server_ke_kterému_přistupujete_, čímž ovšem umožníte používání vašeho Xserveru kýmkoliv z toho serveru, nebo zajistíte přenos klíče na druhou stranu (například využitím ssh -X a xauth extract, sed, xauth merge a po skončení xauth remove). Slávek -- Dne čtvrtek 13 prosinec 2007 22:10 Milos Prudek napsal(a): > On Thursday 13 of December 2007 21:27:16 Petr Klíma wrote: > > Zkuste se podivat, jestli je neco v syslogu, pripadne v Xorg logu. Taky > > se podivejte, jestli mate vubec povolene pripojeni k X serveru (nesmi > > byt spusteny s parametrem -nolisten). No a pak uz by byl cas na ten > > No ale kdyz to funguje pokud pouziju "ssh -X", jak jsem psal, a "ssh -X" je > jen forwardovani na port 6000, tak to znamena ze PC s X serverem nasloucha > na portu, ne? From prudek na bvx.cz Fri Dec 14 09:52:25 2007 From: prudek na bvx.cz (Milos Prudek) Date: Fri, 14 Dec 2007 09:52:25 +0100 Subject: cannot connect to X server In-Reply-To: <200712132314.43034.slavek.banko@axis.cz> References: <200712132009.39450.prudek@bvx.cz> <200712132210.18209.prudek@bvx.cz> <200712132314.43034.slavek.banko@axis.cz> Message-ID: <200712140952.25490.prudek@bvx.cz> On Thursday 13 of December 2007 23:14:42 Slávek Banko wrote: > Když použijete "ssh -X", tak se jednak na druhou stranu klíč doručí > automaticky, a ssh pak zajistí předávání portu a ten na straně klienta > předává pakety lokálně - tedy Xka mohou naslouchat na localhostu. Pokud má Aha, díky za objasnění. -- Milos Prudek From qaxi na seznam.cz Fri Dec 14 10:06:39 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Fri, 14 Dec 2007 10:06:39 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw61zw610aS4=?= In-Reply-To: <25489.195.212.29.171.1197475003.squirrel@www.freemusic.cz> References: <475D312A.6070207@seznam.cz> <1197308174.30488.41.camel@pali-pc.hk.tmapy.cz> <475E310E.2080802@seznam.cz> <475FF526.1080306@seznam.cz> <25489.195.212.29.171.1197475003.squirrel@www.freemusic.cz> Message-ID: <4762479F.9070408@seznam.cz> Zdenek Kaminski napsal(a): > Dne 12 Prosinec 2007, 15:50, "Petr \"Qaxi\" Klíma" napsal(a): > > >>> Je zajimve, ze tohle bylo pouzitelne jeste pred rokem a ted uz je to >>> nepouzitelne.. >>> > > >> Vývoj pane vývoj .... >> > > nepochopil, nevadi. > > Je hezké DNES postavit síť na tom co stačilo VČERA, ale bude to stačit ZÍTRA a POZÍTŘÍ? Nemluvím o super vychtávkách, - mluvím o bezpečnosti (FF 1.5, TB 1.5). - mluvím o kompatibilitě se světem ( OO ) -- Petr Klíma e-mail: qaxi na seznam.cz From smelhaus na bpt.cz Fri Dec 14 09:41:27 2007 From: smelhaus na bpt.cz (Vladimir Smelhaus) Date: Fri, 14 Dec 2007 09:41:27 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: References: Message-ID: <476241B7.9060905@bpt.cz> > pouzivam toto a jsem spokojen > > http://asm.inshop.cz/inshop/scripts/detail.asp?ItemID=810296 Vypadá úplně super. Ale dokázalo by to ushapovat síť na 6Mbps se 60 uživateli, z nichž asi čtvrtina ráda používá p2p? VŠ From Pavel.Just na simac.cz Fri Dec 14 10:49:13 2007 From: Pavel.Just na simac.cz (Pavel Just) Date: Fri, 14 Dec 2007 10:49:13 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <476241B7.9060905@bpt.cz> References: <476241B7.9060905@bpt.cz> Message-ID: <47625199.20801@simac.cz> Vladimir Smelhaus napsal(a): >> pouzivam toto a jsem spokojen >> >> http://asm.inshop.cz/inshop/scripts/detail.asp?ItemID=810296 >> > > Vypadá úplně super. Ale dokázalo by to ushapovat síť na 6Mbps se 60 > uživateli, z nichž asi čtvrtina ráda používá p2p? > Mám tu starou ML350ku s procesorem Celeron 733 s 13ti ethernety. 3x 4-portovka a jedna on-board. Na osmi z nich jedu softwarový switch. Zatím (uptime je 367 dní) žádná reklamace výkonu. Dokáže to uswitchovat asi dva 100mbit toky. Shaping tam nemám, ale vzhldem k tomu, že se jedná o několikanásobně menší provoz, si myslím, že to stihne. Pavel -- Tato zpráva neobsahuje viry, protože nepoužívám MS Windows. From petr.klima na sobriety.cz Fri Dec 14 11:01:30 2007 From: petr.klima na sobriety.cz (=?UTF-8?B?UGV0ciBLbMOtbWE=?=) Date: Fri, 14 Dec 2007 11:01:30 +0100 Subject: Mala krabicka jako vlastni router s linuxem In-Reply-To: <476241B7.9060905@bpt.cz> References: <476241B7.9060905@bpt.cz> Message-ID: <4762547A.2090301@sobriety.cz> Vladimir Smelhaus wrote: >> pouzivam toto a jsem spokojen >> >> http://asm.inshop.cz/inshop/scripts/detail.asp?ItemID=810296 > > Vypadá úplně super. Ale dokázalo by to ushapovat síť na 6Mbps se 60 > uživateli, z nichž asi čtvrtina ráda používá p2p? 6Mbps ushapujete urcite, pokud se pamatuji, tak na VIA 600MHz jsme shapovali aspon 20Mbps. Samozrejme zalezi na nastaveni iptables, kdyz budete mit nekolik tisic pravidel v jedinem chainu, nezvladne to. Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From bar na fi.muni.cz Fri Dec 14 11:10:38 2007 From: bar na fi.muni.cz (Ludek Bartek) Date: Fri, 14 Dec 2007 11:10:38 +0100 Subject: cannot connect to X server In-Reply-To: <200712132215.30665.prudek@bvx.cz> References: <200712132009.39450.prudek@bvx.cz> <200712132014.07317.slavek.banko@axis.cz> <200712132215.30665.prudek@bvx.cz> Message-ID: <4762569E.1080900@fi.muni.cz> Spis v tomto pripade "xhost +192.168.1.2" Ludek Bartek Milos Prudek wrote: > On Thursday 13 of December 2007 20:14:07 Slávek Banko wrote: > >> Musíte si na klienta doručit správný "klíč" z Xserveru - viz xauth. >> > > Nestaci neco jako "xhost +localhost"? > > From hana.skoumalova na ff.cuni.cz Fri Dec 14 11:43:54 2007 From: hana.skoumalova na ff.cuni.cz (Hana Skoumalova) Date: Fri, 14 Dec 2007 11:43:54 +0100 Subject: Hodnoty v Modeline Message-ID: <47625E6A.4010605@ff.cuni.cz> Dobrý den, mám takový problém s širokým monitorem u SunRaye. Rozlišení 1680x1050 není mezi built-in nastaveními, takže ho musím přidat ručně. To se dělá pomocí příkazu utresdef (nevadí, jestli nevíte, co je to zač a jak to funguje), který má vypadat nějak takhle: $ /opt/SUNWut/sbin/utresdef -a -c "Dell 2007FPW" 1680x1050 na 60d 1680x1050 < References: Message-ID: Jestli to jde pres amavis tak v konfiguraku amavisu hledej a uprav: $final_spam_destiny = D_DISCARD; Pak se to samozrejme ridi nastavenyma hodnotama oznaceni a mazani. Honza From czechtony na strojvimp.cz Fri Dec 14 14:14:41 2007 From: czechtony na strojvimp.cz (Czechtony) Date: Fri, 14 Dec 2007 14:14:41 +0100 Subject: Postfix a spam In-Reply-To: References: Message-ID: <476281C1.6080003@strojvimp.cz> V amavisd.conf mam: $spam_quarantine_to = 'bordel na strojvimp.cz'; CzT -- tomas_prosek na volny.cz napsal(a): > Zdravim ve spolek, > mam na serveru postfix a spamassassin, ktery uz celkem slusne oznacuje > spamy, a chtel bych donutit postfix, aby oznaceny spam neposilal > uzivatelum do schranek, ale do jedne urcene schranky. Poradi nekdo, jak na > to? > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From volesak na aristia.cz Fri Dec 14 14:31:09 2007 From: volesak na aristia.cz (=?iso-8859-2?B?SmFuIFZvbGW54Ws=?=) Date: Fri, 14 Dec 2007 14:31:09 +0100 Subject: Postfix a spam In-Reply-To: References: Message-ID: ...ja blbe cetl, omlouvam se, moje reseni by spamy odmitalo, nejak me nenapadlo, ze by si nekdo chtel spamy schovavat :) Nekdo musi archivovat vse. Kdo nemusi, je lepe nad cca 10 - 15 mazat a co je do teto hranice schovavat. Jeste jsem nevidel legalni mail, ktery by mel od spamassassinu vice jak 8 bodu. Honza > Jestli to jde pres amavis tak v konfiguraku amavisu hledej a uprav: > $final_spam_destiny = D_DISCARD; > > Pak se to samozrejme ridi nastavenyma hodnotama oznaceni a mazani. > Honza From bar na fi.muni.cz Fri Dec 14 14:43:28 2007 From: bar na fi.muni.cz (Ludek Bartek) Date: Fri, 14 Dec 2007 14:43:28 +0100 Subject: Hodnoty v Modeline In-Reply-To: <47625E6A.4010605@ff.cuni.cz> References: <47625E6A.4010605@ff.cuni.cz> Message-ID: <47628880.4050902@fi.muni.cz> Vytah z man xorg.conf pro ModeLine (melo by staci pridat do /etc/xorg.conf a v Modes nastavi tento rezim, jako default - prvni v seznamu). Jinak hodnoty maji vyznam: ModeLine nazev pixel_clock hdisp hsync-start hsyncend htotal vdisp vsyncstart vsyncend vtotal polarita_HSync (+/-HSync) polarita_VSync (+/-VSync). Ludek Bartek P.S.: Driv se to delavalo zadanim pribliznych hodnot do XFree86.conf a doladenim pomoci xvidtune. Hana Skoumalova wrote: > Dobrý den, > > mám takový problém s širokým monitorem u SunRaye. Rozlišení 1680x1050 > není mezi built-in nastaveními, takže ho musím přidat ručně. To se dělá > pomocí příkazu utresdef (nevadí, jestli nevíte, co je to zač a jak to > funguje), který má vypadat nějak takhle: > > $ /opt/SUNWut/sbin/utresdef -a -c "Dell 2007FPW" 1680x1050 na 60d 1680x1050 > < htotal=2256 > hfp=104 > hsyncwidth=184 > vtotal=1087 > vfp=1 > vsyncwidth=3 > vcomposite=8 > pixclock=14714 > xres=1680 > yres=1050 > hz=60 > EOF > > Já dokážu pomocí prográmku cvt zjistit, jak by měla vypadat Modeline pro > můj monitor: > > $ ./cvt 1680 1050 60 > > # 1680x1050 @ 60.00 Hz (CVT) > # field rate 59.95 Hz; hsync: 65.29 kHz; pclk: 146.25 MHz > Modeline "1680x1050_60.00" 146.25 1680 1784 1960 2240 1050 1053 > 1059 1089 -HSync +Vsync > > ale problém je v tom, že nevím, která hodnota z Modeline odpovídá které > v tom příkazu utresdef. Mohl by mi někdo pomoci s přiřazením? > > Hanka Skoumalová > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From cramers na seznam.cz Fri Dec 14 17:24:14 2007 From: cramers na seznam.cz (Cramer) Date: Fri, 14 Dec 2007 17:24:14 +0100 Subject: Transparentni ochrana In-Reply-To: <475FD334.2040409@seznam.cz> References: <475FD334.2040409@seznam.cz> Message-ID: <4762AE2E.7020208@seznam.cz> Tak abych to trochu upresnil. Rad bych si postavil neco na zpusob tohoto produktu http://www.zyxel.cz/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=4327696E-D248-4212-9CC7-97A5725A2764 Nejake napady? Pravda je, to co tu uz nekdo rikal, ze asi bude dost slozite (ne-li nemozne) prohanet prez filtry (at uz antivirove,antispamove nebo jine) SSL, SSH a podobna spojeni. To zatim netusim vubec, jak to udelat. cRam > Zdravim, > > resili jste nekdo uz podobny problem? > > Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz > na viry a spyware a podobny plebs., > tak abych pokud mozno na klientskych stanicich nemusel konfigurovat > zadnou ochranu (maximalne vymeneni IE > za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o > Windows stanice. > > To same bych potreboval pro firewall. (Aby na stanicich nemusel byt > personal firewall). > > Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na > Debian a Ubuntu, ale pokud existuje distribuce, > ktera se timto primo zabyva...? > > Diky za tipy a za rady. > > cRam > > "Software is like sex, it's better when it's free" - Linus Torvalds > > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > From dast na panelnet.cz Fri Dec 14 20:02:39 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Fri, 14 Dec 2007 20:02:39 +0100 Subject: Postfix a spam In-Reply-To: References: Message-ID: <20071214190239.GA16625@panelnet.cz> On Thu, Dec 13, 2007 at 10:12:51PM +0000, tomas_prosek na volny.cz wrote: > Zdravim ve spolek, > mam na serveru postfix a spamassassin, ktery uz celkem slusne oznacuje > spamy, a chtel bych donutit postfix, aby oznaceny spam neposilal > uzivatelum do schranek, ale do jedne urcene schranky. Poradi nekdo, jak na > to? > Ahoj, hodne dobre reseni je vytvorit uzivatelum adresar .spam, nechat amavis/ spamassassin, aby vzdy napsal spam-score do hlavicky e-mailu a uzivateli dat nastroj, kde si navoli od kolika bodu bude chtit ukladat e-maily do slozky .spam. Nebo to navolit za nej. Obsah adresar .spam pravidelne promazavat na soubory starsi nez mesic. Tady naopak uzivatelum volbu nedavejte ;). Spamy se score na 10, jak uz nekdo radil, rovnou mazte. -- Dalibor Straka From dast na panelnet.cz Fri Dec 14 20:09:07 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Fri, 14 Dec 2007 20:09:07 +0100 Subject: cannot connect to X server In-Reply-To: <200712132009.39450.prudek@bvx.cz> References: <200712132009.39450.prudek@bvx.cz> Message-ID: <20071214190907.GB16625@panelnet.cz> On Thu, Dec 13, 2007 at 08:09:39PM +0100, Milos Prudek wrote: > Zkousim pristup ke vzdalenemu X clientu a nedari se. Prihlasim se v terminalu > k vzdalenemu PC, zadam: > export DISPLAY=192.168.1.2:0.0 > a zkusim pustit rxvt: > can't open display 192.168.1.2:0.0 > a zkusim kcalc: > cannot connect to X server 192.168.1.2:0.0 > > Pokud se k vzdalenemu PC prihlasim pomoci ssh -X (cili se zapnutym > forwardovanim X pomoci ssh) tak vsechno funguje. Radeji bych ale pouzival > vyse uvedeny postup, je to o hodne rychlejsi bez sifrovani ssh. > Muzete si zmenit sifru podle libosti, napriklad "ssh -c blowfish -X" apod. -- Dalibor Straka From hana.skoumalova na ff.cuni.cz Fri Dec 14 20:24:23 2007 From: hana.skoumalova na ff.cuni.cz (Hana Skoumalova) Date: Fri, 14 Dec 2007 20:24:23 +0100 Subject: Hodnoty v Modeline In-Reply-To: <47628880.4050902__13778.6444895484$1197639847$gmane$org@fi.muni.cz> References: <47625E6A.4010605@ff.cuni.cz> <47628880.4050902__13778.6444895484$1197639847$gmane$org@fi.muni.cz> Message-ID: <4762D867.4070201@ff.cuni.cz> Ludek Bartek wrote: > Vytah z man xorg.conf pro ModeLine (melo by staci pridat do > /etc/xorg.conf a v Modes nastavi tento rezim, jako default - prvni v > seznamu). To platí pro monitor připojený přímo k serveru, ale u těch SunRayů se to musí dělat jinak. > Jinak hodnoty maji vyznam: > ModeLine nazev pixel_clock hdisp hsync-start hsyncend htotal vdisp > vsyncstart vsyncend vtotal polarita_HSync (+/-HSync) polarita_VSync > (+/-VSync). Díky, s tímhle a s tím, co jsem našla na http://www.tkk.fi/Misc/Electronics/faq/vga2rgb/calc.html, to dám dohromady. Hana Skoumalová From mcepl na redhat.com Fri Dec 14 22:27:26 2007 From: mcepl na redhat.com (Matej Cepl) Date: Fri, 14 Dec 2007 22:27:26 +0100 Subject: Ubuntu ve =?UTF-8?Q?firemn=C3=ADs=C3=ADti.?= References: <475D312A.6070207@seznam.cz> <200712131407.35336.prudek@bvx.cz> Message-ID: On 2007-12-13, 13:07 GMT, Milos Prudek wrote: >> Čistě jenom ze zvědavosti -- proč ne CentOS? Měli byste pokoj na >> sedm let ... :-)? Ve firemní síti by snad nemělo rozhodovat jak >> cool ta distribuce je, ne? > > No já bych řekl že asi proto, že na Desktop je 3 roky tak akorát. Sedm let je > už moc dlouho. Ano a proto také bude (nezaručená pomluva) RHEL rebasovaný alespoň jednou v průběhu svého života V DESKTOPOVÝCH APLIKACÍCH (pouze, pochopitelně). Pravděpodobně od RHEL 5.2. Matěj From stoupa na practisoft.cz Sat Dec 15 04:27:12 2007 From: stoupa na practisoft.cz (Petr Vileta) Date: Sat, 15 Dec 2007 04:27:12 +0100 Subject: Postfix a spam References: Message-ID: Dalibor Straka wrote: > Spamy se score na 10, jak uz nekdo radil, rovnou mazte. > > -- Dalibor Straka To jste hodne radikalni. Ja pouzivam lokalni spam filtr na workstation (SpamPal), ktery ma take bayesian filtr, blacklist, whitelist atd.) a asi tak 5% spamu, oznaceneho jako 100% spam jsou maily, ktere me zajimaji. A to ho opravdu uz 5 let ucim (krmim) priklady (ham, spam). Napriklad uzivateli, cesko-nemeckemu tlumocnikovi, prijde nemecky psana zadost o prispevek na charitu pro Africke deti. On je dobry tlumocnik, hodny clovek, ale v internetu se moc nevyzna. Takze mi co cele preposle a na zacatek vlozi cesky psanou otazku "Co si o tom myslite, neni to podvod?" No a samozrejme, ze se to vyhodnoti jako 100% spam, ale pro me je to velmi dulezita zprava, protoze je od zakaznika. -- Petr Skype: callto://fidokomik Na mail uvedeny v headeru zpravy nema cenu nic posilat, konci to v PR* :-) Odpovidejte na petr na practisoft cz From volesak na aristia.cz Sat Dec 15 11:19:14 2007 From: volesak na aristia.cz (=?iso-8859-2?B?SmFuIFZvbGW54Ws=?=) Date: Sat, 15 Dec 2007 11:19:14 +0100 Subject: Postfix a spam In-Reply-To: References: Message-ID: ...to ja pouzivam pro více jak 40 domen spamassassin/clamav/amavis. Co je nad 15 je ve 100% pripadu spam. Kdybych byl objektivni, tak si myslim, ze uz nad 4 je vse spam. Ono hodne zalezi na nastroji, ktery spam oznacuje. Oznacuji nad 4 a nad 15 mazu. Globalne, pro vsechny domeny. Spousta majitelu domen me zadala abych mazal uz to nad 4, nikdy jim to neoznacilo nespravne. A kdyz uz oznaci, odesilatel ma problem se svym serverem (RBL zaznam, chybejici PTR atd.) nebo se opravdu jedna o spam (ve smyslu reklama) Honza Volesak > To jste hodne radikalni. Ja pouzivam lokalni spam filtr na > workstation > (SpamPal), ktery ma take bayesian filtr, blacklist, whitelist > atd.) a asi tak From dast na panelnet.cz Sat Dec 15 14:04:43 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Sat, 15 Dec 2007 14:04:43 +0100 Subject: Postfix a spam In-Reply-To: References: Message-ID: <20071215130443.GA27237@panelnet.cz> On Sat, Dec 15, 2007 at 04:27:12AM +0100, Petr Vileta wrote: > Dalibor Straka wrote: > > Spamy se score na 10, jak uz nekdo radil, rovnou mazte. > > > To jste hodne radikalni. Ja pouzivam lokalni spam filtr na workstation > (SpamPal), ktery ma take bayesian filtr, blacklist, whitelist atd.) a asi tak > 5% spamu, oznaceneho jako 100% spam jsou maily, ktere me zajimaji. A to ho > opravdu uz 5 let ucim (krmim) priklady (ham, spam). Napriklad uzivateli, > cesko-nemeckemu tlumocnikovi, prijde nemecky psana zadost o prispevek na > charitu pro Africke deti. On je dobry tlumocnik, hodny clovek, ale v internetu > se moc nevyzna. Takze mi co cele preposle a na zacatek vlozi cesky psanou > otazku "Co si o tom myslite, neni to podvod?" No a samozrejme, ze se to > vyhodnoti jako 100% spam, ale pro me je to velmi dulezita zprava, protoze je > od zakaznika. > Moje konfigurace postfixu odmita spamy v prijimacim rizeni. Takze spam s hodnotou nad 10 dostane 550 a mam vystarano. Pripadnemu poctivemu odesilateli se vrati e-mail jako nedorucitelny. Takoveto samotne reseni by bylo prilis vykonove narocne. Proto jej kombinuji s greylistingem, prisnyma pravidlama na ehlo, domeny atd. -- Dalibor Straka From cirkl na ccu.cz Sat Dec 15 13:41:17 2007 From: cirkl na ccu.cz (Stepan Cirkl) Date: Sat, 15 Dec 2007 13:41:17 +0100 Subject: Transparentni ochrana In-Reply-To: <4762AE2E.7020208@seznam.cz> References: <475FD334.2040409@seznam.cz> <4762AE2E.7020208@seznam.cz> Message-ID: <4763CB6D.6090909@ccu.cz> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zdravim, podle meho narazite oproti temto komercnim produktum (je jich vice, viz. treba take FortiGate) na problem definic. Pokud to budete chtit resit samostatne, tak IMHO nebudete schopen je ziskat stejne efektivne jako nakupem od danych spolecnosti. Antivir a antispam jako problem nevidim, ale nevim, kde chcete ziskat kvalitni a rozsahlou databazi klasifikaci stranek do kategorii a pro jejich blokovani. (zakazt porno a pod.). Jestli vite, kde takovou DB efktivne sehnat, rad se poucim. Zasifrovane veci z principu nezkontrolujete, takze IMHO je stejne potreba mit nakou ochranu i na stanicich. Dale se Vam muze na stanici dostat neco nepekneho napriklad ne mediich, ktere si uzivatele prinesou... Proc necete poridit neco komercniho a hotoveho, ale chcete si to slozite a s mensi efektivitou delat sam? Abych se pokusil byt i trochu konstruktivni. Jak na to? Stavovay firewall - iptables, netfilter + prislusne moduly od nej. Klasifikace p2p provozu a pod pomoci techto modulu. Pak ho muzete zakazovat. A upravy modulu + psani novych na klasifikaci dalsich typu nechteneho provozu. Omezovani provozu - prikaz tc. Viz. http://lartc.org/ . Antispam+Antivir: Pokud Vam jde jen o SMTP provoz, nainstalujte si treba postfix+amavis+spamassassin+clamd a zkonfigurujte si to do rezimu "filtru". Prichozi SMTP veme na FW tento SMTP server a po zpracovani pak preda cilovemu SMTP serveru ve vnitrni siti. Odchozi SMTP muzete natvrdo zakazat s vyjimkou legalnioho SMTP serveru a ten pres smartrelay mit poveseny na tento fitlracni SMTP servr. Druha moznost je veskery odchozi SMTP trafic predmerovat na tento server a prohnat filtry. Tady asi narazite na problem, pokud klient odesila pred SMTP server s autorizaci umisteny mimo sit. Mam pocit, ze pri tvrdem presmerovani na Vas "SMTP proxy" autorizace neprojde. Nicmene, to by asi slo vyresit modifikaci Vaseho SMTP serveru a bude to IMHO jedna z tech jednodusich uprav. POP3 a IMAP bude asi problem. Tady zadny hotovy nastroj neznam. Prvni moznost je zakazat POP3 a IMAP z venku. Druha moznost je napast aplikacni proxy SW, na ktery tento provoz presmerujete a ktery pak provede kontrolu antispam a antivir kontrolu. Teprve pak je preda klientovy. Principelne viz. treba "Obecny e-mailovy scanner" v AVG. IMAPs a POP3s asi nevyresite, pokud v komuikaci nebudete vystupovat jako opravdova aplikacni proxy a nebudete rozsifrovavat a zasifrovavat. Ale to uz je defakto utok M-in-M a pri sparvne implementaci na klientovi tak bude vyhodnocen a spojeni nebude vyuzito. Takze pri zachovani funkcnosti IMAPs a POP3s, jedine misto, kde pak muzete realne provest konrolu je az v emailovem klientovy pomoci pluginu anviru a pod. O poste sifrovane napriklad pomoci PGP plati jedno a to same. Nektere slaboucke sifry mozna rozsifrujete za ucelem kontroly, ale ty zase nikdo, kd je pri smyslech, nebude pouzivat. HTTP - transparentni HTTP proxy server naveseny na antivirovou kontrolu + ACLy. Kde chcete brat data pro ACLy (kategorizace porna, her a pod.) ? IMHO nikde zadarmo nesezenete a je nerealne, aby jste je byl schopen delat sam. HTTP provoz pak musite na tuto transparentni porxy nak dostat. Nemuzete to delat jen na zaklade TCP portu, takze budete potrebovat naky modul do netfiltru, ktery HTTP provoz pozna a presmeruje. Pro HTTPS plati defakto to same co pro sifrovane maily. Zde tedy znate IP serveru. Na jeho zaklade urcitou filtraci provest muzete. Staci nekde venku sehnat HTTPS proxy kterou nezklasifikujete a uz mam cestu, jak dostat i zakaznay a NEZKONTROLOVANY obsah az na stanici. Takze si ty viry pekne stahnu. A tem se to bude libit. Zadny antivit na stanici a co vic i na okolnich pocitacich... Nechtel bych pak byt ve Vasi kuzi... VPN - IPSec - standardni implementce v Linux, SSL tunelovani = OpenVPN. SSL webovy portal pro pristup k vnitrnim strankam: Tady by to asi slo resit kombinaci HTTPS severu a proxyny. Mozna je i elegantnejsi reseni. A nebo si to cele napsat sam. Jine nez HTTP zdroje se vetsinou resi pomoci pluginu do prohlizece, activex nebo java apletu. Tady IMHO vlastni vyvoj. Reporty pomoci logu a nastroje na jejich zpracovani uz si jiste snadno zvladnete udelat. Vysledek: 1) Bez alespon zakladniho zabezpeceni proti kodlivemu SW na stanicich se neobejdete. Antivir/Antispy/Antiadware tam je potreba. Jsou veci, ktere jinde z principu nenazkontrolujete a jeste je potreba myslet na to, co se stane, kdyz treba nekdo prinese napadeny notebook a zapoji ho do uz defakto nechranene site. Nebudu uvazovat o tom, ze by dokonce chtel poskodit sit nekdo z vlastnich uzivatelu. 2) Jestli Vam jde o usetreni penez, tak si ten system kupte. Resit to ve vlastni rezii Vas IMHO prijde na vic penez, pokud to nebudete replikovat na hodne mist. Mimo to mam z Vaseho dotazu pocit, ze se nejedna o oblast, ve ktere se prilis vyznate. - -- s pozdravem Stepan Cirkl IT consultant CC unLimited, v.o.s. Cramer wrote: > Tak abych to trochu upresnil. > > Rad bych si postavil neco na zpusob tohoto produktu > > http://www.zyxel.cz/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=4327696E-D248-4212-9CC7-97A5725A2764 > > > Nejake napady? > > Pravda je, to co tu uz nekdo rikal, ze asi bude dost slozite (ne-li > nemozne) prohanet prez filtry (at uz antivirove,antispamove nebo > jine) SSL, SSH a podobna spojeni. To zatim netusim vubec, jak to > udelat. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHY8tszf6Y1Rt92UwRAqrMAKC6PiXFdfbdykm+l7yr8U7d8rWtYACgsoav 8rmbzcM5R//6tEG2PvkVda4= =kcxx -----END PGP SIGNATURE----- From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:21:39 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:21:39 +0100 (CET) Subject: XRandR a fullscreen aplikace (mplayer, evince) In-Reply-To: <20071210221002.GA12314@fi.muni.cz> Message-ID: <20071215182130.841.0@paddy.troja.mff.cuni.cz> On Mon, 10 Dec 2007, Jan Kasprzak wrote: > Mam notebook ktery ma nativni rozliseni 1280x800, coz pro veci > jako je projektor je nepouzitelne, protoze typicky projektor ma pomer > stran 1.3333, zatimco ja mam 1.6. Neodpovídá to na původní dotaz, ale já jsem to zkoušel řešit prostě tak, že jsem dočasně pustil další X server s tím "správným rozlišením". (I když v mém případě mi to nakonec moc nepomohlo, protože se ukázalo, že nedokážu zůčastněný hardware přesvědčit k tomu, aby projektor svěřepě neuřezával levých cca 50 pixelů obrazu, ale už to byl asi zase jiný problém.) --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:04:57 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:04:57 +0100 (CET) Subject: IPSec / NAT 1:1 In-Reply-To: <5efac$475c56f5$d5dcd90a$9198@news.chello.cz> Message-ID: <20071215180427.841.0@paddy.troja.mff.cuni.cz> On Sun, 9 Dec 2007, Jan Rezab wrote: > V logu viz nize je, ze IPSEC se nahodi v poradku. Ze site 192.168.5.0 do > site 192.168.2.0 to funguje dobre (ping i telnet). Ale obracene se uz > nedostanu ani pingem ani telnetem. Tak to asi nebude problem se samotným IPSECem, jelikož sám píšete, že pakety chodí oběma směry (jinak by nefungoval ten ping; i když asi nelze vyloučit úchylnou variantu, že jedním směrem to chodí šifrovaně a druhým nikoli). Mohl by být problém v tom, že se SA podaří nahodit jen na podnět jedné strany a ne to druhé. Ale když se to podaří prošťouchnout z jedné strany, tak by to pak mělo jít i z té druhé. Jaké SA to (na obou koncích) vytvoří, když se provedete ten úspěšný ping? --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:38:48 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:38:48 +0100 (CET) Subject: cannot connect to X server In-Reply-To: <200712132314.43034.slavek.banko@axis.cz> Message-ID: <20071215182212.841.0@paddy.troja.mff.cuni.cz> On Thu, 13 Dec 2007, Slávek Banko wrote: > Když použijete "ssh -X", tak se jednak na druhou stranu klíč doručí > automaticky, a ssh pak zajistí předávání portu a ten na straně klienta > předává pakety lokálně - tedy Xka mohou naslouchat na localhostu. Dokonce nemusí ani poslouchat na localhostu, stačí unixový socket (takové to /tmp/.X11-unix/X0). --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:22:12 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:22:12 +0100 (CET) Subject: IPtables - Jak nadefinovat rozsah IP adres + 1xIP mimo rozsah In-Reply-To: Message-ID: <20071215182207.841.0@paddy.troja.mff.cuni.cz> On Tue, 11 Dec 2007, Roman Beitl wrote: > Dotaz: Kdyz bych chtel ale pridat jeste tu samostatnou IP 209.15.15.55 je > korektni tento zapis: > $IPTABLES -A FORWARD -i $INET_IFACE -s 209.15.15.55 -m iprange --src-range > $VALET_VPN_2 -p tcp -d $SERVERVM -j ACCEPT Podmínky jsou konjunktivní, takže toto pravidlo bude znamenat, že zdrojová adresa je rovna 209.15.15.55 a zároveň je v intervalu $VALET_VPN_2, což asi není to, co od toho chcete. --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:22:07 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:22:07 +0100 (CET) Subject: groupwise a zobrazovani vlaken v evolution In-Reply-To: <475E8244.90107@plbohnice.cz> Message-ID: <20071215182203.841.0@paddy.troja.mff.cuni.cz> On Tue, 11 Dec 2007, Katerina Bubenickova wrote: > Z hlavicky zpravy se mi ale zda, ze evolution ma vsechny dostupne udaje - > napr.: > References: <474C023B.80205 na plbohnice.cz > > ... > In-Reply-To: <20071206112612.GA12596 na pzkagis.cz > > Jestli to v References a Reply-To vypadalo *přesně takhle* (i s tím mailto:), tak se nedivím, že to nefungovalo. --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:22:03 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:22:03 +0100 (CET) Subject: servis24.cz a squid In-Reply-To: Message-ID: <20071215182154.841.0@paddy.troja.mff.cuni.cz> On Tue, 11 Dec 2007, mardon wrote: > Od minuleho tydne mame ale problemy s pristupem ke sluzbe > www.servis24.cz a to takovy , ze opakovane mi hlasi Tamtamy hlásí, že prý má spořka nějaké potíže se svými systémy. > While trying to retrieve the URL: http://www.servis24.cz/ Do internetového bankovnictví *nikdy* nelezte přes vstupní bod, co je na HTTP. Mohl bych... ne... my nesmíme ani naznačovat. :) --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:21:54 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:21:54 +0100 (CET) Subject: openssh a kerberos4 authentication In-Reply-To: Message-ID: <20071215182148.841.1@paddy.troja.mff.cuni.cz> On Tue, 11 Dec 2007, dejfson wrote: > mohl by mi prosim nekdo poradit jak rozchodit openssh s kerberos4 > autentizaci? Podle mne OpenSSH vůbec nepodporuje Kerbera 4 (on by se také neměl vůbec používat vzhledem k chybám v návrhu protokolu). Možná tam v CERNu mají nějaký patch. --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:21:22 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:21:22 +0100 (CET) Subject: sprava pamate na linux-2.4 In-Reply-To: Message-ID: <20071215180458.841.0@paddy.troja.mff.cuni.cz> On Mon, 10 Dec 2007, Martin `MJ' Mares wrote: > Kdepak neznama pravidla -- kdyz mate 4GB adresniho prostoru, 1GB si > ukousne kernel a ve zbylych 3GB se usadi binarka, jeji data a dynamicke > knihovny, tezko cekat, ze se najde vic souvislych volnych 1GB useku :-) Zejména když se to tak chytře rozmístí, že v prvním GiB je binárka, na začátku druhého GiB dynamické knihovny (pokud tam není execshield nebo něco podobného, který je přestěhuje na začátek prvního) a na konci třetího GiB zásobník. :) Ve 2.6 se v nějaké verzi afaik schválně měnil layout adresového prostoru, aby dynamické knihovny nepřekážely uprostřed. --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From peak na argo.troja.mff.cuni.cz Sat Dec 15 18:21:30 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 15 Dec 2007 18:21:30 +0100 (CET) Subject: Swap a MD raid In-Reply-To: <20071210214224.GA25313@panelnet.cz> Message-ID: <20071215182123.841.0@paddy.troja.mff.cuni.cz> On Mon, 10 Dec 2007, Dalibor Straka wrote: > Ve 2.4 existuje deadlock a ve 2.6 ne. Ve zdrojacich 2.6 neni alokace, > ktera by ho mohla zpusobit. Afaik jsou alokace ve 2.6 přepsané pomocí mempoolů, které si drží nějakou předem alokovanou rezervu pro případ, že by došla normální paměť. Teď je ještě otázka, zda ta rezerva bude dostatečná. :) --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From jan.kunder na gmail.com Sat Dec 15 23:53:49 2007 From: jan.kunder na gmail.com (Jan Kunder) Date: Sat, 15 Dec 2007 23:53:49 +0100 Subject: =?ISO-8859-2?Q?Re:_Ubuntu_ve_firemn=ED_s=EDti.?= In-Reply-To: <475FE708.2050508@seznam.cz> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> Message-ID: <6da5d9f50712151453i268be39bmacf215f3ee2ca9ce@mail.gmail.com> On Dec 12, 2007 2:50 PM, "Petr \"Qaxi\" Klíma" wrote: > Matej Cepl napsal(a): > > On 2007-12-10, 12:29 GMT, Petr "Qaxi" Klíma wrote: > > -1 bod - balíčkovací systém který potřebuje nadstabu nadstavby abych > zjistil "který nainstalovaný balík obsahuje soubor pam_ldap.so" > (dpkg -> apt-get -> apt-file) to je unikátní přivětivost .... > (zaplať Marx za rpm -> yum ) (já vím, že má mouchy, ale rychlost fakt > neni všechno ...) dpkg -S pam_ldap.so na to netreba ani apt-get ani aptitude ani dselect :) BTW: apt-get istym sposobom nie je nadstavba, ale sucast systemu. -- Jan Kunder jan.kunder-HATESPAM-gmail.com http://www.kunder.sk http://www.romintegra.sk http://www.hudakcd.sk JKjkjk rozpmnqestka From MI5-Victim na mi5.gov.uk Sun Dec 16 16:31:00 2007 From: MI5-Victim na mi5.gov.uk (MI5-Victim na mi5.gov.uk) Date: 16 Dec 2007 15:31:00 GMT Subject: MI5-Persecution: Four Years of MI5 Persecution Posts on Internet Newsgroups (21058) Message-ID: Four Years of "MI5 Persecution" Posts on Internet Newsgroups For approximately the first three years of the MI5 persecution, from June 1990 until late 1992, I kept as quiet as possible, in the hope that by not reacting, MI5s interest in me would decrease and they would simply go away of their own accord. This is the sort of behaviour some people employ against bullies; if the bullies arent getting a reaction, then they might simply go away and victimize someone else. Unfortunately, this tactic didnt work. The quieter I became, the more shrill and hysterical the noise from the Security Service operatives. For about two years I didnt watch TV news at all. Yet this only heightened their obsessed fixation; they continued to follow me wherever I went, they continued to induce harassment at work by managers and fellow workers, and they continued to encourage me to commit suicide. They seemed to regard my refusal to react as a crime which they would have to "put right" by ever more extreme forms of abuse. Finally, in 1995, I changed tactics radically. Since late 1994 I had had accounts with internet providers in Ontario, Canada. I discovered the cornucopia of internet newsgroups, on every topic from consumer electronics, to politics and legal topics, and I discovered online services such as Compuserve and AOL. In May 1995, I made the first posting to the conspiracy newsgroup, on the subject of "BBCs Hidden Shame". BBC's Hidden Shame The internet newsgroup discussion, which has now reached its fourth anniversary, started with an article in alt.conspiracy, which I reproduce here. Date: Thu May 4 18:27:24 1995 Newsgroups: alt.conspiracy Subject: BBC's Hidden Shame Remember the two-way televisions in George Orwell's 1984? The ones which watched you back? Which you could never get rid of, only the sound could be turned down? Well the country which brought Orwell into the world has made his nightmare follow into the world after him. Since 1990 the British have been waging war against one of their own citizens using surveillance to invade privacy and a campaign of abuse in the transmitted media in their efforts to humiliate their "victim". And the most remarkable thing about it is that what they do is not even illegal - the UK has no laws to protect the privacy of its citizens, nor does it proscribe harassment or abuse except in the case of racial abuse. A lot of people in England know this to be going on, yet so far they have maintained perfect "omerta"; not a sound, not a squeak has escaped into the English press, and for all the covert harassment absolutely nothing has come out into the public domain. Have the British gone mad? I think we should be told At this point, I did not name MI5 as my persecutors. I was still unsure that they were the ones responsible for the "psychological terrorism". In followup posts however I did name them; and the persecutors have never denied the claim; so I think my guess is valid. (The Security Service Tribunal in 1997 have said "no determination in your favour was made", but it is a well established fact that MI5 lies routinely to the Tribunal which has never found in favour of a plaintiff, so no conclusions can be drawn from this.) This first post was made to alt.conspiracy, but further posts were made to the UK-local newsgroups, in particular uk.misc but also uk.legal and uk.politics (which is now called uk.politics.misc). Some time ago I tried to take the battle to the Compuserve forums, UKPOLITICS (which is now called UKCURRENT - current affairs), but my articles were censored by the forum operators. Such censorship is impossible on the internet newsgroups. Police Refuse to Act I have complained several times to the Metropolitan Police, who have each time refused to help. From: Green Newsgroups: uk.misc,uk.politics,alt.politics.british,soc.culture.british Subject: Re: MI5 Persecution: Why Aren't the British Police Doing Their Job? Reply-To: Green na guidion.demon.co.uk Date: Sun Apr 7 21:13:30 1996 In article bu765 na torfree.net "Mike Corley" writes: >Last Easter (1995) I went into the local police station in London and spoke to >an officer about the harassment against me. But I couldn't provide tangible >evidence; what people said, in many cases years ago, is beyond proof, and >without something to support my statements I cannot expect a police officer to >take the complaint seriously. This in itself dos not suggest that the police have it in for you. The old bill operates on extremely tight spending limits forced on them by that pillock Michael Howard, and without evidence, they often have higher priorities than chasing something that cannot go to court. I doubt that the police are actually being leant on, but they probably realise that if they looked into this, they would be leant on hard. The met always stays away from anything that looks like it has Defence, Security or secret service interest already, because they realise that they are below these government agencies in the general pecking order. If I walked into my local nick and complained that MI5 were snooping on me, they would show me the door without even looking at my evidence, because that bored desk seargant with only five years to go before he retires doesn't want to start fucking about with somebody who has incurred the wrath of Stella Rimington. He would rather deal with the lost dogs and driving licence producers, eat his cheese and pickle sandwiches and piss off home at the end of his shift than have some high ranking spook having a go at his boss and getting him a bollocking. In short, you have earned much sympathy but little surprise. Just remember that saying about the enemy of your enemies. Most recently, I wrote in March 1999 to Charing Cross Police Station CID. They did not acknowledge or reply to my letter. When I phoned them up, the detective Id written to treated me to a sadly not unusual display of police bigotry, with an uneducated rant about "your paranoid rubbish". It would be nice to think that such uneducated bigotry is something other than wholly typical of police behaviour, but unfortunately that is an illusion that is rapidly dispelled. Uncorruptible Jon Snow of Channel Four News >From previous articles the reader will know what I think Jon Snow has recently been watching me while he reads Channel Four News in the evening. Recently I digitized a few moments of one such broadcast, where his face twists into a smile, without there being anything in the news broadcast to cause merriment. Here is a usenet post from some time ago on MI5s "bought and paid for" tools in the so-called "free" press. Peter Harding (harding na ermine.ox.ac.uk) wrote: : I was at speakers' corner on Sunday. There was one chap who was bellowing : about something or other, I don't know what, but one thing he said to : someone caught my ear: : "BBC, MI5, same thing." Can't disagree with that sentiment. Wasn't it documented that MI5 sometimes "bought" journalists and broadcasters? I remember reading a report by some jouralist who had been offered an extra tax-free income by MI5 to become their covert mouthpiece, and had refused. ............................................................................. > : >mouthpiece, and had refused. > : > : It was Jon Snow of Channel 4. > > Was it reported in any of the papers? It has been reported several times. The most recent was in Private Eye, a few months back. As I recall they also wanted information from him; journalists would be a natural choice for members of the Security Service and the Secret Intelligence Service for information sources. > It might be interesting to see what he had to say regarding their > attempt to recruit him. He was most concerned that many others would have accepted such an offer. However, we can probably make an educated guess as to some of those who accepted: Nigel West (Rupert Allason, MP) and Chapman Pincher would come near to the top of the list. -- \/ David Boothroyd. Socialist and election analyst. Omne ignotum pro magnifico. British Elections and Politics at http://www.qmw.ac.uk/~laws/election/home.html I wish I was in North Dakota. Next General Election must be before 22nd May '97 The House of Commons now : C 324, Lab 272, L Dem 25, UU 9, PC 4, SDLP 4, SNP 4, UDUP 3, Ind 1, Ind UU 1, Spkrs 4. Government majority = 1. Telephone Tate 6125. Corrupt Security Service agents steal millions from taxpayers Money is of course a factor in the grand equation which is the MI5 persecution. It costs money for the Security Service to "buy" people in the media etc. But that is only a small part of their expenditure of taxpayers resources. Most of the expenditure is directly on the salaries if the agents involved; and in this post I put forward the theory that MI5 are trying to draw out their involvement for as long as possible, very cynically, to maximise their income and line their own pockets. At each stage they have tried to pretend that I am something out of the ordinary. Either I was very stupid ("he's an idiot") or very clever ("he's like a genius"). Either I was a threat to Western civilization (Levin once referred to me as the next Hitler) or I was completely defenceless ("a soft toy"). Now, it should be obvious to any person with common-sense that I am not out of the ordinary in any way. I have an IQ which is average for the Web, I am racially white European, and there are plenty of other people with schizophrenia or epilepsy out there who haven't been targeted for MI5 attention, so why me? I think the answer is that the MI5 agents who harass me have cynically exploited the situation by painting me as extraordinary in order to assure themselves of well-paid employment funded by the ordinary British taxpayer. To put it bluntly, they are stealing millions of pounds from the taxpayer to feed their own pockets. This assertion is supported by the observation that it's the same agents who are doing the harassment. Six months ago in a local hospital I was harassed by someone whose face I had seen (he had stared straight at me aggressively, at the time I just thought it was some nutter but it turns out he was one of "them") aboard a KLM flight a couple of years ago. It's presumably been the same people most of the time. I've seen the way contractors act when they don't want their positions terminated. Would these agents really want to lose their well-paid employment harassing me? Presumably they are promising their bosses a "breakthrough" (ie my demise) real-soon-now and have been for the last seven years, while all the while these MI5 agents skim millions off the taxpayer. I wouldn't mind a job like that. Perhaps if I persecute myself a little bit, like standing in front of a mirror and shouting mindless obscenities, do you reckon I'd get a slice of the caky Service Tribunal. This year Nick Brooks, current Tribunal Secretary, confirmed to me that he could not think of a single case where the Tribunal had found in favour of a complainant. Here is my usenet post from two years ago. Subject: MI5: "It wasn't us" Newsgroups: uk.misc,uk.legal Organization: Toronto Free-Net "The Security Service Tribunal have now investigated your complaint and have asked me to inform you that no determination in your favour has been made on your complaint." Signed ER Wilson, Tribunal Secretary Well that's a relief then. All that spamming for nothing eh. Gaw blimey, if they say they're not doing it then it can't be them, can it? In a recent letter to Mr Brooks I expressed the opinion that the Tribunal were unable to fulfil their responsibilities in the face of MI5 falsehoods. Nevertheless, I do intend to make another complaint to the Tribunal in the near future, despite the Tribunal appearing to be a toothless watchdog. Discrimination against a Unit Minority MI5 have been very clear in their instructions as to what I should do. They have openly shouted at me the word "suicide", and also from the other abuse it is clear that they want my existence terminated. This point is covered in more detail in a previous article. The following post describes the xenophobic nature of MI5s campaign against me. They have refined their bigotry down to a unit minority, yet they make use of the discrimination against the mentally ill which is a feature of current British society. Subject: Re: MI5 says "Kill Yourself" Newsgroups: uk.misc,uk.legal,uk.politics.misc,uk.media References: <53eeev$cmg na axalotl.demon.co.uk> Organization: Toronto Free-Net Distribution: iain na hotch.demon.co.uk (Iain L M Hotchkies) wrote: >Indeed. If you've ever had a 'conversation' with someone suffering >from florid schizophrenia, you'll know how difficult it can be to >'argue' with them. I don't have florid symptoms. But I'm in a difficult situation, because those people who don't know, aren't going to believe, and those who do, they just go along with the crowd. It's never a good idea to go against the grain, and the grain here is defined by interests in the establishment and the media. Even people who could say out loud what was happening won't, because then there's a risk that they'll be seen as traitors and ostracised. Usually this type of 'hidden abuse' is racial and targetted at a racial minority within a country. You keep the minorities out of the good jobs, but you don't admit discrimination exists. It happens everywhere, not just in Britain. The persecution that is going on now is in reality a refined form of racism. Instead of "nigger" it's "nutter", and abusing the mentally ill is still socially acceptable today. In 50 years it might not be, but today there isn't any social or legal sanction against it. So really they've refined racial harassment down to a minority of one. The words may be different, but the methods are the same. 21058 -- Posted via NewsDemon.com - Premium Uncensored Newsgroup Service ------->>>>>>http://www.NewsDemon.com<<<<<<------ Unlimited Access, Anonymous Accounts, Uncensored Broadband Access From MI5-Victim na mi5.gov.uk Sun Dec 16 17:29:39 2007 From: MI5-Victim na mi5.gov.uk (MI5-Victim na mi5.gov.uk) Date: 16 Dec 2007 16:29:39 GMT Subject: MI5-Persecution: Molestation during Travel (25424) Message-ID: MI5 Persecution: Molestation during Travel MI5s persecution of me varies in intensity. Since 1990 it has been steady for perhaps 80% of the time; there was a notable quiet period in 1993, and another quiet period in Jan-Feb 1995, as well as a hiatus in the first two months of 1999. It puzzles me that they cease and restart, seemingly without any logic or reason. But one aspect of MI5s activities against me which is relatively predictable is this weeks articles topic, which is Molestation during Travel. Almost every time I cross the Atlantic, go to the Continent or even try to enjoy a holiday in this country, you can bet that MI5 will be there doing their utmost to wreck it all. This aspect of the harassment is particularly relevant as I will be travelling to Europe again in a months time, with naturally the Minidisc recorder in tow; so it will be interesting to see if I can record the abuse which will almost certainly take place, either on the Tube going to the airport, at the airport, on the flight, in the terminal building - MI5 have previously instituted instances of abuse at each of these locations, so well see how much taxpayers money they waste this time, and whether it will prove possible to capture their abuse on minidisc. Read about the MI5 Persecution on the Web June 1992 in Polands mountain resort of Zakopane The persecution started in June 1990, and for the first two years I stayed in the UK apart from a couple of brief day trips to Calais. By the summer of 1992 Id had enough of being cooped up in England with abusive fellow employees egged on by an abusive secret police service, and decided to spend 10 days in southern Poland, on what was intended to be a holiday at the mountain resort town of Zakopane. Unfortunately the psychopaths of the Security Service were not willing to allow me to enjoy a holiday in peace and quiet. The journey to Zakopane was by coach from the meeting point at Londons Victoria coach station (National Express) followed by ferry followed by another coach across Europe. As we left Victoria a youth and his girlfriend started a loud tirade of abuse directed at "this bloke", where the "bloke" was never named, but it was very clear that the "bloke" was myself. The youth said "they" had "found somebody from his school, and he was always really stressed at school, a real psycho". Again, the label "they" was not elaborated on, but it was clear that "they" = the persecutors from MI5. The boy also said, "he was in a bed and breakfast for only one night and they got him". By a not unexpected coincidence I had been in a B&B in Oxford a week previously, which had been booked from work; other things lead me to the conclusion that the company's offices were bugged for most of the 2 1/2 years that I was there, so "they" would have known a room in the B&B had been booked. After a few minutes of this I went back to where they were sitting and asked where they were travelling. The boy named a village in France, and the girl's giggling suddenly ceased; presumably it permeated to her brain cell what the purpose of the boy's abuse was. It is now very clear to me that MI5 were trying to have me incarcerated, assaulted or killed on this trip across Europe. The degree of verbal violence inescapably leads to this conclusion. When we arrived at our destination, it became clear that many people, both in our tour group and its guide, and among the ordinary residents of the town, knew there was a movement under way to "get" me. MI5 employed many people and significant resources for an action which they knew would only take a maximum of ten days. A commercial operation would never have felt able to waste such resources on such an unproductive and temporary action; only a state-sponsored, taxpayer-funded entity like the Security Service would be able to be so wasteful. To give some examples of what happened in those ten days; I was walking in some woods outside the town, when a Polish woman, looking at me, said the English "shit" in a strongly Polish-accented voice. For the first three years 1990-92 MI5 had been trying to force this word on me. Another example; I was walking near my "hotel" when a mother said laughing to her child, "a wiesz ze to prawdziwy wariat" which means "you know hes a real madman". And the "TV reacting" happened there too; on Polish TV, a bemused looking journalist said to another, "to jest sprawa Anglikow", which means "its the concern of the English", in other words, none of our business, despite what the English are trying to force down our throats. Just before we left for home, I went with some others from our group to a nearby bar. There a man shouted at me the same sexual obscenity which MI5 have constantly thrown at me these last three years. I think MI5 try to justify their various terms of abuse by repeating them at me until I say them, either while conscious or while talking in my sleep; and then they seize on my saying those words to "prove" that the obscenities are "my fault", et cetera. This rather stupid reasoning of theirs can actually be seen as indicative of the psychopathic condition attributed to them in a previous article; blaming the victim for the crime you inflict on him is how psychopaths think. Nor did the persecutors let up during the return trip. Returning on the ferry over the channel, a rather insalubrious-looking guy talked to his mates about "and you know this bloke, hes really mad you know, hes really mad". On the National Express return coach to London, a group of five or six young people started shouting at me. I slumped in my seat and tried to avoid presenting a target, so they got ever more strident - "whats the matter with you, cant you hear us?" One of the other people who had been on the trip to Poland asked them why they were shouting at me, and they said, "hes been to Cambridge", to which the co-holidayer asked them, "have you been to Cambridge?" presumably thinking they were aggrieved fellow students, but they answered "no". Even after I left the coach at Elephant and Castle abuse continued; in the tube station, two kids started throwing abuse at me; one of them said to the other, "and you know he works?" to which the other answered "yes". Immediate Aftermath of November 1992 As you will know from previous articles, my manager at OCG - ARIS/Oxford, Mr Mitchell, induced a mental breakdown in me in the months leading up to Nov/92. The diagnosis was regarded by the persecutors as a victory for them, because few if any people give credence to allegations of harassment when they are made by somebody suffering from schizophrenia. There is also a bias against the mentally ill, an "institutionalised bigotry" in society comparable to the institutionalised racism against blacks. However, MI5 did not let up on persecuting me following Nov/92. In December 1992 I flew by charter jet to Alicante in Spain for two weeks recuperation. MI5 planted one of their people on the flight, a youth who tried to start some noises that "hes a nutter". One of the other passengers replied, "oh hes a nutter is he? oh well!" and the youth shut up and said nothing for the rest of the flight. I think it would be fair to say that the youth on the flight was embarrassed by what he had been asked to do in making the flight "uncomfortable" for me; he sounded defensive rather than aggressive. My first trip to Canada in June 1993 Ive already covered this in a previous article so Ill just give a brief summary here. On 10 June 1993 I flew British Airways from Heathrow to Torontos Pearson Airport. On de-planing from the aircraft, one of a group of four fellow passengers looked at me and said, laughing, "if he tries to run away well find him". It was quite obvious that these four men were the ones who had been harassing me since 1990. I did nothing to apprehend them or bring this incident to the attention of the airport authorities, mostly because this was my very first visit to Canada, and the last thing I wanted was to get into a dispute before I had even finished disembarking. In retrospect, I can see this was a terrible mistake; I should have made every effort to detain and identify these people. Subsequently I have made numerous attempts to obtain the names of these people from British Airways passenger lists, by talking to BA, through a lawyer in Ontario, through a solicitor in England, through the UK police, and also through private detectives in the UK. But all my efforts have come to nothing. BA have told me they keep passenger lists for a period of seven years, so they will still have the list for this 1993 flight. I did not see or hear anything during the rest of my visit to Ontario in 1993 which would have lead me to believe that I was being watched or followed. Journey across Canada in summer 1994 As I think Ive already said in previous articles I emigrated to Canada in late May 1994. For six weeks between late May 1994 and early July 1994 I travelled across Canada from coast to coast, starting in Toronto, visiting various cities and ending up in British Columbia. I saw this both as something of a holiday, and the chance to get to know a little better my adopted country. As you can guess, MI5 followed me everywhere I went during these six weeks. In Toronto, where I started this trip in late May, I was spoken about by one youth to another with the words "hes an idiot", to which the other replied, laughing sympathetically, "good luck to him". A couple of days later I went to Montreal and stayed at the YMCA downtown. As you can guess (this is all so predictable, isnt it?) MI5 followed me there and bugged my room at the YMCA. Not only that, but they managed to set-up an instance of "newscaster reaction" from a local television station; while I was watching a Vermont TV news programme on the set in my room, the woman reporter said, "well theyre just tired and they want to go home", which sounds like a pretty unprofessional thing to say until you realise she was trying to say of me that I was the one that was supposed to be tired, and they (ie MI5) wanted me to go home to the UK. On the bus journey across the North American continent, it was quite clear that MI5 were following me every step on the way. For the first part of the journey they actually put someone on the bus with me, a youth who said at me "that guys paranoid" and tried to incite other passengers to attack me. I stopped for a couple of days in Winnipeg in central Canada, and on leaving the town heard on the radio a female presenter ranting about "insanity! insanity!". It is very tiring travelling such a long distance by bus; I took the journey in two steps, each of about 36 hours; and it is especially tiring when you know MI5 are watching you and harassing you every step of the way. When I finally got to Vancouver, MI5 instituted the usual harassment, in very short order. I was surprised how quickly they were able to induce hatred towards me in elements of the general populace; the Security Service must have employed a number of agents and serious resources in a very short period of time; and for no real gain, because I havent been back to BC for almost five years, so all their "work" appears to be for nothing. In downtown Vancouver a street person said in front of me, "theyre all talking about him". For a few days I was staying at Pauls Guest House (345 W.14th Ave); on the day I left, the owner Paul shouted at no-one in particular, "hes going to Victoria" - which was quite accurate, I was indeed going to the provincial capital Victoria on Vancouver Island. But I had not told anyone at the guest house where I was going; I had only mentioned to my parents back in England on the phone that I was going away from Vancouver for a few days. Which leads me to suppose that MI5s bugging of the phone in my parents house yielded the "intelligence" that I intended to visit Victoria, and they had passed the information on to Paul. When I got to Victoria it was again obvious that the persecutors were "doing their stuff" there as well. On the street I was identified as being English, although I had not said anything so my accent hadnt given me away; and returning by ferry to the mainland, I was abused by a Canadian woman who said, "hes a nutter! you can run but you cant hide". During my years in Canada I have never heard the word "nutter" on any other occasion; I do not think it is part of Canadians vocabulary; so the Canadian woman on the ferry, who was obviously talking about me, must have been supplied with this word by the English persecutors. And once I got back to Vancouver, staying at the Austin Hotel on Granville St, I listened to a conversation in the apartment block directly opposite, and a man saying, "hes paranoid, so thats as bad as it can be, so why are they doing this to him?". Holiday in the States, August 1995 By 1995 I was living in Canada, and in August I went down the eastern seaboard to Florida and as far as Key West by car. As you can guess (this is all so boring and predictable, isnt it?) MI5 followed me every step of the way. I can see in retrospect that this must have been quite easy for them as they had my car bugged, both on the inside to listen to anything that was said and what radio station I was listening to, as well as what must have been a tracker device installed to track it across long distances. The first city I visited was Philadelphia. In the old Congress Hall where the first US Congress assembled, the woman guide started referring to my situation, saying that "all these people in Europe were watching it", and they were "a little paranoid" at this 18th-century experiment in democracy. Also I had recently written a newsgroup post where Id described a (female) poster as "wet-nosed" (implying "canine"), and a young girl in Philadelphia remarked, "so he thinks were dogs?" There were two or three more incidents during this holiday in the eastern States, including a radio station down near Miami, showing "they" had tracked me all the way there, and were bugging the inside of my car; but I didnt record the details and Ive forgotten some of it now. Also down in Miami Beach a French tourist in a lift expressed support for me with the words, "cest incroyable" ie. its incredible, meaning that MI5s well-known actions against me were beyond belief. To go back a bit, in about May/June 1995 Id visited New York, again by car, and was insulted several times by people using the same words that had been used against me in England. In Central Park, and elderly Englishman (not a real gentleman - but then the Engish view of themselves as "gentlemen" etc is quite laughable) looked at me and said "idiot". And while I was eating in a streetside restaurant a New York youth started laughing and said something like, "I cant believe it, hes actually here" - I think that was because I had had an expressed wish to visit New York for some years before this, although after this visit I wont be going there again for a very long time. Visit to Poland December 1995/January 1996 In December 1995 I flew (BA again, unfortunately - every time Ive flown BA one of these incidents has happened, presumably MI5 is happier setting up harassment on British-domiciled carrier) from Montreal to Berlin and travelled on to Poland to visit family. MI5 naturally harassed me in Poland during my brief stay. They followed me around and got Polish people to take part in the harassment. In one case two Polish youths talked in front of me saying in English (with marked Polish accents), "fucked up men, fuck you". There were also other incidents which I dont remember too clearly since it was some time ago. The return flight connected through Heathrow, and in the transit lounge MI5 again set-up harassment against me. In Poland they were talking their abuse in English, and in London they set Polish people after me to speak in Polish; they heard me on the phone to my father, and said "a wiesz ze to Polski wariat", in an almost sympathetic, inclusive fashion (translation. "you know hes a Polish nutter"). Once on the flight to Montreal I was again set upon by two English youths, one of whom spoke and the other listened. The aggressive "fat bastard" youth said, "if he wants to be a wanker" (its my fault theyre harassing me, you see), self-justification that "hes a nutter" (so we have to keep on abusing him, because hes ill), as well as talking about the town in Poland where I had been staying. He also said, "he doesnt know who we are", but as already remarked in a previous article, that was at best a half-denial of my guess expressed in internet newsgroups that the people after me were MI5 - if anything its a half-confirmation rather than a half-denial. These incidents are still going on. You can hear digitised audio files of abuse on a BA flight to Berlin in 1998 on the Web at address On this flight they were again attacking my mental health; "paranoid, hes paranoid" and "nutter" are discernable. The last "during travel" contact was at Ottawa Airport on 21 July 1998, when "Alan Holdsworth" the psychopath MI5 agent, dressed as a vagrant, was pacing aggressively in the departure area. In three weeks I will again be travelling to Europe; we will see what fresh acts of molestation MI5 perpetrate during this trip. 25424 -- Posted via NewsDemon.com - Premium Uncensored Newsgroup Service ------->>>>>>http://www.NewsDemon.com<<<<<<------ Unlimited Access, Anonymous Accounts, Uncensored Broadband Access From MI5-Victim na mi5.gov.uk Sun Dec 16 18:00:41 2007 From: MI5-Victim na mi5.gov.uk (MI5-Victim na mi5.gov.uk) Date: 16 Dec 2007 17:00:41 GMT Subject: MI5-Persecution: MI5 are Afraid to Admit Theyre Behind the Persecution (27607) Message-ID: MI5 are Afraid to Admit They're Behind the Persecution MI5 have issued a formal denial of any involvement in my life to the Security Service Tribunal, as you might expect them to; but, more importantly, the persecutors have never denied that theyre from the Security Service, despite several years of accusations from my corner on usenet and in faxed articles. I am not surprised that the Security Service Tribunal found "no determination in your favour". I am however a little surprised that the persecutors have refused to confirm my identification of them; by doing so, they implicitly admit that my guess was right. "No determination in your favour" says the Security Service Tribunal In 1997, I made a complaint to the Security Service Tribunal, giving only the bare outlines of my case. I do not think it would have made very much difference if Id made a much more detailed complaint, since the Tribunal has no ability to perform investigatory functions. It can only ask MI5 if they have an interest in a subject, to which MI5 are of course free to be "economical with the truth". A couple of months after my complaint the Tribunal replied that; The Security Service Tribunal have now investigated your complaint and have asked me to inform you that no determination in your favour has been made on your complaint. Needless to say this reply didnt surprise me in the slightest. It is a well established fact that the secret service are a den of liars and the Tribunal a toothless watchdog, so to see them conforming to these stereotypes might be disappointing but unsurprising. It is noteworthy that the Tribunal never gives the plaintiff information on whether the "no determination in your favour" is because MI5 claims to have no interest in him, or whether they claim their interest is "justified". In the 1997 report of the Security Service Commissioner he writes that "The ambiguity of the terms in which the notification of the Tribunals decision is expressed is intentional", since a less ambiguous answer would indicate to the plaintiff whether he were indeed under MI5 surveillance. But I note that the ambiguity also allows MI5 to get away with lying to the question of their interest in me; they can claim to the Tribunal that they have no interest, but at a future date, when it becomes clear that they did indeed place me under surveillance and harassment, they can claim their interest was "justified" - and the Tribunal will presumably not admit that in their previous reply MI5 claimed to have no interest. "He doesnt know who we are" In early January 1996 I flew on a British Airways jet from London to Montreal; also present on the plane, about three or four rows behind me, were two young men, one of them fat and voluble, the other silent. It was quite clear that these two had been planted on the aircraft to "wind me up". The fat youth described the town in Poland where I had spent Christmas, and made some unpleasant personal slurs against me. Most interestingly, he said the words, "he doesnt know who we are". Now I find this particular form of words very interesting, because while it is not a clear admission, it is only a half-hearted attempt at denial of my guess that "they" = "MI5". Had my guess been wrong, the fat youth would surely have said so more clearly. What he was trying to do was to half-deny something he knew to be true, and he was limited to making statements which he knew to be not false; so he made a lukewarm denial which on the face of it means nothing, but in fact acts as a confirmation of my guess of who "they" are. On one of the other occasions when I saw the persecutors in person, on the BA flight to Toronto in June 1993, one of the group of four men said, "if he tries to run away well find him". But the other three stayed totally quiet and avoided eye contact. They did so to avoid being apprehended and identified - since if they were identified, their employers would have been revealed, and it would become known that it was the secret services who were behind the persecution. Why are MI5 So Afraid to admit their involvement? If you think about it, what has been going on in Britain for the last nine years is simply beyond belief. The British declare themselves to be "decent" by definition, so when they engage in indecent activities such as the persecution of a mentally ill person, their decency "because were British" is still in the forefront of their minds, and a process of mental doublethink kicks in, where their antisocial and indecent activities are blamed on the victim "because its his fault were persecuting him", and their self-regard and self-image of decency remains untarnished. As remarked in another article some time ago, this process is basically the same as a large number of Germans employed fifty years ago against Slavic "untermenschen" and the Jewish "threat" - the Germans declared, "Germans are known to be decent and the minorities are at fault for what we do to them" - so they were able to retain the view of themselves as being "decent". Now suppose this entire episode had happened in some other country. The British have a poor view of the French, so lets say it had all happened in France. Suppose there was a Frenchman, of non-French extraction, who was targeted by the French internal security apparatus, for the dubious amusement of French television newscasters, and tortured for 9 years with various sexual and other verbal abuse and taunts of "suicide". Suppose this all came out into the open. Naturally, the French authorities would try hard to place the blame on their victim - and in their own country, through the same state-controlled media which the authorities employ as instruments of torture, their view might prevail - but what on earth would people overseas make of their actions? Where would their "decency" be then? This is why MI5 are so afraid to admit theyre behind the persecution. Because if they did admit responsibility, then they would be admitting that there was an action against me - and if the truth came out, then the walls would come tumbling down. And if the persecutors were to admit they were from MI5, then you can be sure I would report the fact; and the persecutors support would fall away, among the mass media as well as among the general public. When I started identifying MI5 as the persecutors in 1995 and 1996 there was a sharp reduction in media harassment, since people read my internet newsgroup posts and knew I was telling the truth. The persecutors cannot deny my claim that theyre MI5, because then I would report their denial and they would be seen as liars - but they cannot admit it either, as that would puncture their campaign against me. So they are forced to maintain a ridiculous silence on the issue of their identity, in the face of vociferous accusations on internet newsgroups and faxed articles. Have MI5 lied to the Home Secretary? In order for the Security Services to bug my home, they would either have needed a warrant from the Home Secretary, or they might have instituted the bugging without a warrant. Personally I think it is more likely that they didnt apply for a warrant - I cannot see any Home Secretary giving MI5 authority to bug a residence to allow television newscasters to satisfy their rather voyeuristic needs vis-a-vis one of their audience. But it is possible that the Security Service presented a warrant in some form before a home secretary at some point in the last nine years, for telephone tapping or surveillance of my residence, or interception of postal service. So the possibility presents itself that a Home Secretary might have signed a warrant presented to him based on MI5 lies. Just as MI5 lie to the Security Service Tribunal, so they might have lied to a Home Secretray himself. MI5 and MI6 are naturally secretive services former home secretary Roy Jenkins said, they have a "secretive atmosphere ... secretive vis-a-vis the government as well as [enemies]". Jenkins also said he "did not form a very high regard for how they discharged their duties". It was only a few years ago that MI5 was brought into any sot the extraordinary thing is that British media organisations like the state- and taxpayer-funded BBC take such an active part in the MI5-inspired campaign of harassment. We have after all heard of MI5 trying to bribe broadcast journalists; but surely there must be a substantial number who are not bought or blackmailed by the Security Services, and who take part in the "abuse by newscasters" of their own volition? The BBC is supposed to be independent of the government of the day as well as the Establishment in general. While perhaps it is childish to think that the BBC is anything other than effectively state-controlled, the degree of collusion between the BBC and the British Secret Police MI5 is something you would not find in many countries. Individual tele-journalists in other countries would have enough self-esteem not to allow themselves to be controlled by their secret police - seemingly, BBC broadcasters like Martyn Lewis and Nicholas Witchell have such a low opinion of their employing organisation that they see no wrong in dragging the BBCs no-longer-good name through yet more mud, at the mere request (whether supported by financial or other inducements) of the British secret Police, MI5. And when challenged, these broadcasters LIE about their involvement, with just as little shame as MI5 themselves. The BBCs Information dept have said that; "I can assure you that the BBC would never engage in any form of surveillance activity such as you describe" which is an out-and-out lie. Buerk and Lewis have themselves lied to their colleagues in the BBCs Information department over the "newscaster watching", but unsurprisingly they refuse to put these denials in writing. Doubtless if the "newscaster watching" ever comes to light, Buerk and Lewis will then continue to lie by lying about these denials. So much for the "impartial" BBC, a nest of liars bought and paid for by the Security Services! It is obvious that the persecution is at the instigation of MI5 themselves - they have read my post, and only they have the surveillance technology and media/political access. Yet they have lied outright to the Security Service Tribunal. Similarly, BBC newscasters Michael Buerk and Martyn Lewis have lied to members of their own organisation. The continuing harassment indicates they are all petrified of this business coming out into the open. I will continue to do everything possible to ensure that their wrongdoing is exposed. 27607 -- Posted via NewsDemon.com - Premium Uncensored Newsgroup Service ------->>>>>>http://www.NewsDemon.com<<<<<<------ Unlimited Access, Anonymous Accounts, Uncensored Broadband Access From dejfson na gmail.com Sun Dec 16 18:24:09 2007 From: dejfson na gmail.com (dejfson) Date: Sun, 16 Dec 2007 18:24:09 +0100 Subject: soft -kombinace vektorove grafiky a spreadsheetu Message-ID: zdravim potreboval bych nakreslit vektorove jednoduche elektricke schematko ve kterem bude hafo odporu. Tyto odpory pocitam ve spreadsheetu a jsou ruzne pro ruzne vstupni parametry. Chtel bych, aby ten obrazek dynamicky menil hodnoty tech odporu ktere si nakreslim tak, aby to odpovidalo tomu co jsem vypocital ve spreadsheetu. Zkousel jsem uz miliardu operaci s openoffice, ale zadna z nich nevede ke kyzenemu vysledku. 1) kdyz si obrazek nakreslim v oodraw, nejsem schopny do nej dostat dynamicky hodnoty ze spreadsheetu. pokud pouziju ole object a udelam pouze 'link' na ten spreadsheet, je to ok az do okamziku kdy data ve spreadsheetu zmenim. pak musim v oodraw updatovat linky. to totalne rozhazi format toho vlozeneho spreadsheetu (jiz neukazuje na bunky ktere jsem chtel) 2) v oo wordu existuje presne to co hledam, tedy oznacim si bunku ve spreadsheetu, pak 'paste special' a DDELink. Toto funguje vyborne, kdyz zmenim spreadsheet tak cca do 3 sekund se updatuje link. problem je, ze se neda jednoduse umistit ten link vzhledem k obrazku ktery se tam musi (take) importovat pres ole object 3) v oo draw si nakreslim ten obrazek, pak do nej vlozim spreadsheet a udelam vsechny vypocty tam. tohle funguje ale strasne spatne se to edituje. musim tam vlozit jeden spreadsheet ve kterem to musim vypocitat (nedosel jsem na zpusob jak - kdyz vlozim 2 spreadsheety - udelat aby vlozene tabulky navzajem odkazovaly na sve bunky). resenim je pouzit tabulku pres celou stranku. ta pri editaci zakryje obrazek takze neni videt a o nejakem umisteni bunky tabulky nemuze byt ani rec. 4) vlozit obrazek primo do oocalc, to se zase velmi spatne upravuje velikost bunek tak aby vsechny sedely s tim obrazkem.... uz si fakt nevim rady. nevi nekdo jak by tohle slo zaridit v ooffice, pripadne neexistuje jiny SW na kresleni obrazku ktery umi udelat link na jednu nebo vice bunek ze spreadsheetu openoffice (nebo jineho opensource softu) tak aby mi to zobrazilo vypocitanou hodnotu presne v miste obrazku kde to potrebuju? diky moc d. From MI5-Victim na mi5.gov.uk Sun Dec 16 18:29:13 2007 From: MI5-Victim na mi5.gov.uk (MI5-Victim na mi5.gov.uk) Date: 16 Dec 2007 17:29:13 GMT Subject: MI5-Persecution: No Justice for the Victims of MI5 (29790) Message-ID: MI5 Persecution Update: Friday 11 June, 1999 Harassment in a pub in Clapham, Tuesday lunchtime Once a month, or once every other month, I meet a Polish friends of mine who lives in Clapham North, and sometimes we go to a particular pub near where he lives. The last time was some two months ago; I did not have my minidisc-walkman with me, and consequently was seriously harassed by people MI5 had instructed to harass me, in the pub. This Tuesday, 8 June 1999, we again went to the same pub for a pre-meal drink. This time I did have my minidisc-walkman with me. As you can guess, we were followed into the pub by a couple of young people (Im getting older and older - isnt it funny how the MI5 agents all look young these days?). They started talking about my situation, in particular some travel I had booked the previous day. Unfortunately, they were talking fairly quietly, and my minidisc didnt pick up their speech. MI5s schizophrenic reasoning is that simultaneously I am very important and worthy of their acts of persecution, and I am also totally unimportant and their abuse of me "doesnt matter". Perhaps they should test their agents and managers for obsessive personalities or psychotic features in the same way as employees are drug-tested. MI5 might lose their "worst cases" employees if some psychological testing were applied to their recruitment procedure. Toothless Watchdogs. What a Surprise. Recently I have been engaging in communications with two watchdogs, the Security Service Tribunal which deals with complaints against the security service (and always clears MI5 of any wrongdoing), and the Data Protection Registrar, which is mandated to investigate misuse of personal data held on computer. In a letter to Nick Brooks, Security Service Tribunal secretary, dated 20 April, I asked him if the Tribunal, as an allegedly independent body, had the means to investigate complaints against MI5 other than asking MI5 to themselves investigate complaints. To my disappointment, his reply two weeks later answered the question only indirectly, in the negative. Whatever the reader might think of the merits of the case I have been putting before you in faxed articles this last year and half, you will surely recognise that it is a significant anomaly for the Tribunal to have no independent means of investigating complaints, particularly given the view expressed even by previous home secretaries that the security services are untrustworthy. MI5 Persecution: No Justice for the Victims of MI5 In a previous article I detailed the similarities between the current MI5 Persecution in England, and other historical instances of similar persecution, notably that by the Nazi Germans in the thirties and forties. The Germans persecuted first the mentally ill, the epileptics and those suffering from schizophrenia, then moved on to racial groups; in todays Britain the persecution is again directed at those with mental illness, which the British in their cowardice find easier than taking on racial groups as the Germans did. But just as in Thirties Germany there was no recourse against a malign and omnipotent state, so the MI5 Secret Police in the modern British Fascist State allow no justice for their victims. No Recourse Against the Security Services Illegal Harassment It has become apparent to me over the last nine years just how loaded the dice are in todays Britain, a fundamentally fascist country which masquerades as a democracy. Britain is a democracy in name only; the Establishment, the defence and MI5 secret police are always there, regardless of which party has been voted into power most recently - and from "New Labours" conduct in office one finds it difficult to tell them apart from Old Tories, in their crackdowns on the sick and vulnerable in society. In thirties Germany the victims of the Nazi regime had no legal recourse against their State oppressors; and in todays Fascist British state, the victims of the Establishment and its MI5 Secret Police similarly have no recourse against the illegal state-funded and organised oppression. There is supposed to be a mechanism for dealing with MI5 crimes, in the shape of the Security Service Tribunal and Commissioner; yet these have never found favour of a plaintiff. One might as well ask the Nazi SS to investigate crimes against epileptics or Jews as ask the Security Service Tribunal to investigate MI5 crimes against British citizens; it is quite obvious what the answer is going to be, regardless of what you say to them, and what evidence you provide. The Tribunal and Commissioner are a mere formality, a whitewashing body to give the Secret Services a veneer beneath which they hide their shabby criminality. "Institutional Racism" and Bigotry in the Metropolitan Police The recent inquiry into the racist murder of Stephen Lawrence found clear evidence of systematic and deliberate racism in the Metropolitan Police, which cannot have surprised anyone. Commissioner Sir Paul Condon accepted a somewhat lukewarm definition of institutional racism as being "unconscious". In truth, and this truth must surely be obvious to anyone who has any familiarity or encountered the great British police, the Met has not just "unconscious" racism, but very clearly "conscious" and deliberate racism, of the kind that would have done Thirties Germans proud. And it is a bastion of such open racism - when many other parts of society are learning to live in a multicultural environment, the Met is still living in the past in its attitude to the minorities. But in addition to the systematic racism confirmed by the Lawrence inquiry, there is also something much more relevant to this case, which is systematic police bigotry against the physically and mentally disabled, which I personally have experienced in my dealings with the police over the years. You cannot expect equal treatment if you are mentally disabled. I tried to make a complaint to the police in 1995 about the harassment I had been subjected to for several years. As soon as they found out I had mental illness, they refused to even talk to me. I tried again in March 1999; the police made various threats to me, while ranting about "your paranoid rubbish" in reference to the complaints expressed to them. The police refusal to do the job they are employed and paid to do is extremely serious, particularly as this case is highly important, indeed key to the whole issue of British self-perception at the end of the 20th century and the beginning of the 21st century. Britain has lost much in the last fifty years - it has lost an empire, it has lost its self-respect and its identity as a people. If the MI5 persecution finally makes it into the light and the Security Services are seen for the rather cheap bullies their behaviour indicates, it will have a massive and harmful effect on British self-perception in the new century. Security Service Tribunal - Blatant Whitewashing A few weeks ago I spoke on the phone to Nick Brooks, the Secretary of the Security Service Tribunal, which is supposed to deal with cases of MI5 transgression. I asked him if the Tribunal had ever found in favour of a plaintiff and against the Security Service. He answered that as far as he knew, it had not. I also asked Mr Brooks if the Tribunal had any means of investigating allegations of criminal activity by MI5, other than asking MI5 themselves if they had engaged in such activity. His rather circuitous written reply states that the 1989 Security Service Act provides that "it shall be the duty of every member of the Service to disclose or give to the Tribunal such documents or information as they may require for the purpose of enabling them to carry out their functions under this Act". Which is a very round-about way of saying - "No" - the Tribunal has no way of investigating MI5 crimes - None At All. Setting up the S.S. Tribunal, and creating a Security Service Commissioner, was really an act of falsehood by the government. It is generally recognised that MI5 are out of reach of the normal criminal justice system - the police, as we have seen, have no intesot answer to the government; in a previous article I quoted Roy Jenkins speaking of "a secretive atmosphere.... secretive vis-a-vis the government as well as [enemies]", and a "lack of frankness" from MI5. If the government wanted to, it could reform the secret services and ensure they acted in conformance with the laws which have been enacted for them in the last ten years. But apparently the present government does not see any need to ensure security service compliance with the law. As noted above, the regulatory machinery for MI5 is deliberately weak; the Tribunal has no independent means of investigation, and it is simply a waste of time complaining to the Tribunal or Commissioner. Every so often, fresh revelations come to light of secret service transgressions. We have heard from Shayler that MI5 bugged Jack Straw and Peter Mandelson; we have heard from Peter Wright that MI5 plotted to see Wilson ejected from office; yet so closed is the system of government that the law is never enforced against MI5 when they "bug and burgle" everyone from politicians to ordinary citizens. No Justice from the Legal System, either Britain has a civil and criminal justice system which effectively limits many complaints from being heard. For a civil complaint to be brought before a court, you need a solicitor willing to act on your behalf. Supposedly it is possible to represent yourself as a Litigant-in-Pthe basis of being "frivolous and vexatious" or "disclosing no cause for action in law". This is exactly what happened to me in 1997 when I twice tried to take the BBC to court for spying on me in my living room at home; my case was twice struck out, and on the second occasion an order was made against me that I could not bring further civil litigation against the BBC without leave of the court. As the reader can guess it is quite impossible for a person with schizophrenia, who complains about the secret services and media interfering in his life, to find a solicitor willing to represent him in legal action against the persecutors. I have quite a lot of evidence of the continuing persecution which I have posted on the website, even if the evidence is quite tentative and perhaps open to varying interpretations. But I have tried several firms of solicitors; some of them have acted unprofessionally and abused me; all of them have refused to represent me. My psychiatrist gave me the name of the firm of Bindman and Partners in central London, and I have approached them twice. On each occasion they refused to accept my instructions. Plainly the problem with Bindmans, which they have admitted, is their bigotry against mentally disabled people; yet this is not just something that is wrong with Bindmans, it is something that is wrong with the legal system as a whole, since the legal system necessitates finding a solicitor willing to represent you in order to bring a case to court, but it does not have a mechanism for providing a lawyer in the case where no solicitor is willing to take on your case. So the British legal system is such as to prevent cases such as mine from ever receiving an airing in a court. So much for the civil courts. But the criminal justice system is no better. Two years ago the Protection from Harassment Act came into force. But again, while the Act is all very well on paper, in practice it is unenforceable in my case, since it would require Police action to see the law implemented, and if the police cannot even be trusted to conduct a murder investigation competently (in the Lawrence case), then what chance is there of their investigating complaints against the Security Service? Of course, it would be possible for me to personally issue proceedings through a private prosecution either against MI5 themselves, or against one or more of their media tools; but here we see the same problems as with the civil courts, because first of all I would have to find a lawyer willing to act on my behalf. Litigants-in-person do exist in the criminal courts, but the Attorney General can bring such a prosecution to an end by taking it over and entering a plea of "nolle prossequi"; and I suspect that if I were to bring a private prosecution against either MI5 or one of their media tools, then this is exactly what would happen. So much for British justice. But if anything the wrongs that have been perpetrated on me by the British justice system are quite mild to what others have suffered. Others have been wrongly convicted based on police evasions and lies, and spent many years in jail based on false charges. I should count myself lucky that despite the best efforts of the MI5 secret police, I have not acquired any criminal charges or convictions; which shows that for all their resources and influence, and the clear imperfections in the British legal system, there are still limits on how much subversion MI5 can achieve. The latest in a long line of injustices A comment I heard during the recent scandal of the police mishandling of the Lawrence murder investigation is that "its not as if the police themselves murdered him". This is not a particularly wise statement to make about the case, since it could be argued that the four alleged murderers were aided in their crime by the expectation that the police would deliberately botch the investigation - which of course is exactly what the police did. But in my case, this would be a completely inaccurate thing to say - since the MI5 secret-police have expressly been trying to nine years now to see an end put to my life, either by having me incarcerated and my liberty ended, or by forcing self-termination on me. It is exactly as if the secret police "themselves murdered [me]", since that is what their aim is in their campaign against me. The public has heard of instances of police mishandling of cases, of police manufacturing evidence, lying in court, extracting false confessions to clear up crimes, et cetera. Various instances of extra-legal activity by the secret services have also come to light in the last few years. The unhappy truth is that what MI5 have been doing to me for the last nine years is really nothing out of the ordinary for them. To me it seems unbelievable that this sort of systematic campaign of harassment, which thousands and thousands of people in this country and abroad are well aware of, could exist for such a long period of time with the media maintaining "omerta". But my case is not the first such instance of persecution by the "British secret police", and judging by the lack of any real controls on MI5, I very much doubt it will be the last. 29790 -- Posted via NewsDemon.com - Premium Uncensored Newsgroup Service ------->>>>>>http://www.NewsDemon.com<<<<<<------ Unlimited Access, Anonymous Accounts, Uncensored Broadband Access From ber na eunet.cz Mon Dec 17 07:06:33 2007 From: ber na eunet.cz (Milan BERKA) Date: Mon, 17 Dec 2007 07:06:33 +0100 Subject: Transparentni ochrana In-Reply-To: <4762AE2E.7020208__27366.4953456775$1197649503$gmane$org@seznam.cz> References: <475FD334.2040409@seznam.cz> <4762AE2E.7020208__27366.4953456775$1197649503$gmane$org@seznam.cz> Message-ID: K tomu také musím říct, že pokud stanice nepřeinstalujete na UNIX, pak budete potřebovat ochranu minimálně: 1. Na FW 2. Na stanicích 3. Na mailovém serveru Jinak máte smůlu, jak už o tom tady někdo psal. Stačí, když někdo donese nakažené USB a zastrčí ho do díry... Donese svůj COMP a píchne ho do sítě. P2P komunikace se také používá šifrovaně (teda apoň rozumní lidé), takže to taky neodstíníte. Rozumní lidé používají také IMAPS a POP3S, tam si taky neškrtnete. Viděl bych ještě jednu možnost ochrany a to nedovolit spouštět na MS Win žádné programy, používat to jako terminál, ale to nevím, zda by vyhovovalo. Milan Berka Cramer napsal(a): > Tak abych to trochu upresnil. > > Rad bych si postavil neco na zpusob tohoto produktu > > http://www.zyxel.cz/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=4327696E-D248-4212-9CC7-97A5725A2764 > > Nejake napady? > > Pravda je, to co tu uz nekdo rikal, ze asi bude dost slozite (ne-li > nemozne) prohanet prez filtry (at uz antivirove,antispamove nebo jine) > SSL, SSH a podobna spojeni. > To zatim netusim vubec, jak to udelat. > > cRam > > >> Zdravim, >> >> resili jste nekdo uz podobny problem? >> >> Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz >> na viry a spyware a podobny plebs., >> tak abych pokud mozno na klientskych stanicich nemusel konfigurovat >> zadnou ochranu (maximalne vymeneni IE >> za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o >> Windows stanice. >> >> To same bych potreboval pro firewall. (Aby na stanicich nemusel byt >> personal firewall). >> >> Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na >> Debian a Ubuntu, ale pokud existuje distribuce, >> ktera se timto primo zabyva...? >> >> Diky za tipy a za rady. >> >> cRam >> >> "Software is like sex, it's better when it's free" - Linus Torvalds >> >> >> _______________________________________________ >> Linux mailing list >> Linux na linux.cz >> http://www.linux.cz/mailman/listinfo/linux >> >> > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From qaxi na seznam.cz Mon Dec 17 09:58:45 2007 From: qaxi na seznam.cz (=?UTF-8?B?IlBldHIgXCJRYXhpXCIgS2zDrW1hIg==?=) Date: Mon, 17 Dec 2007 09:58:45 +0100 Subject: Ubuntu ve =?UTF-8?B?ZmlyZW1uw60gc8OtdGku?= In-Reply-To: <6da5d9f50712151453i268be39bmacf215f3ee2ca9ce@mail.gmail.com> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> <6da5d9f50712151453i268be39bmacf215f3ee2ca9ce@mail.gmail.com> Message-ID: <47663A45.9060005@seznam.cz> >> -1 bod - balíčkovací systém který potřebuje nadstabu nadstavby abych >> zjistil "který nainstalovaný balík obsahuje soubor pam_ldap.so" >> (dpkg -> apt-get -> apt-file) to je unikátní přivětivost .... >> (zaplať Marx za rpm -> yum ) (já vím, že má mouchy, ale rychlost fakt >> neni všechno ...) >> > > dpkg -S pam_ldap.so > na to netreba ani apt-get ani aptitude ani dselect :) > BTW: apt-get istym sposobom nie je nadstavba, ale sucast systemu. > SORRY vypadlo mi tam NEnainstalovaného - toto vám najde pouze soubory z nainstalovaného balíku ... -- Petr Klíma e-mail: qaxi na seznam.cz From dtoman na fortech.cz Mon Dec 17 10:32:59 2007 From: dtoman na fortech.cz (Dalibor Toman) Date: Mon, 17 Dec 2007 10:32:59 +0100 Subject: Postfix a spam References: <20071215130443.GA27237@panelnet.cz> Message-ID: <013901c8408f$cfe9dbd0$01000002@fortech.local> On Saturday, December 15, 2007 2:04 PM , Dalibor Straka wrote: > Moje konfigurace postfixu odmita spamy v prijimacim rizeni. mam tomu ruzumnet tak, ze SPAM odmitnete jeste v SMTP relaci s odesilacim serverem? Tj pred zarazenim zprav do fronty? Jak jste toho dosahl? (bavim se o skutecne detekci spamu ne o greylistingu, spf atd) D. Toman From findrik na gmail.com Mon Dec 17 12:33:21 2007 From: findrik na gmail.com (Rado Findrik) Date: Mon, 17 Dec 2007 12:33:21 +0100 Subject: redirect port In-Reply-To: <2d8d9e04-7e73-4225-b72c-165dcc162d3b@a35g2000prf.googlegroups.com> References: <2d8d9e04-7e73-4225-b72c-165dcc162d3b@a35g2000prf.googlegroups.com> Message-ID: zdravim, ospravedlnujem sa, tato konfiguracia funguje, fungovala aj ta povodna :( môj tester (kamarat na telefone) nevedel, ze maju vo firme zakzane pripajat sa na vysoke porty. ked som to skusil modemom z domu - islo to. diky za pomoc. --rf On Dec 13, 2007 2:11 PM, wrote: > Musíte mít povolené pesměrování v tabulce PREROUTING i FORWARD. Takto: > > $IPTABLES -t nat -A PREROUTING -p tcp -d $INET_IP --dport 10888 -j > DNAT --to 192.168.1.253:10888 > $IPTABLES -A FORWARD -i $INET_IFACE -o $LAN1_IFACE -p tcp -d > 192.168.1.253 --dport 10888 -j ACCEPT > From cramers na seznam.cz Mon Dec 17 13:17:53 2007 From: cramers na seznam.cz (Cramer) Date: Mon, 17 Dec 2007 13:17:53 +0100 Subject: Transparentni ochrana In-Reply-To: References: <475FD334.2040409@seznam.cz> <4762AE2E.7020208__27366.4953456775$1197649503$gmane$org@seznam.cz> Message-ID: <476668F1.8060205@seznam.cz> No na stanicich pobezi windows. Co se tyka serveru (fw,mail...), tak tam pochopitelne bude UNIX / Linux. Ano, s tou sifrovanou komunikaci je celkem problem v tomhle ohledu. S tim vyuzitim jako terminalu to take bohuzel nepripada v uvahu. No a jakym zpusobem maji tyto veci resene ty zminovane komerni produkty? cRam > K tomu také musím říct, že pokud stanice nepřeinstalujete na UNIX, pak > budete potřebovat ochranu minimálně: > > 1. Na FW > 2. Na stanicích > 3. Na mailovém serveru > > Jinak máte smůlu, jak už o tom tady někdo psal. Stačí, když někdo donese > nakažené USB a zastrčí ho do díry... Donese svůj COMP a píchne ho do > sítě. P2P komunikace se také používá šifrovaně (teda apoň rozumní lidé), > takže to taky neodstíníte. Rozumní lidé používají také IMAPS a POP3S, > tam si taky neškrtnete. > > Viděl bych ještě jednu možnost ochrany a to nedovolit spouštět na MS Win > žádné programy, používat to jako terminál, ale to nevím, zda by vyhovovalo. > > Milan Berka > > Cramer napsal(a): > >> Tak abych to trochu upresnil. >> >> Rad bych si postavil neco na zpusob tohoto produktu >> >> http://www.zyxel.cz/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=4327696E-D248-4212-9CC7-97A5725A2764 >> >> Nejake napady? >> >> Pravda je, to co tu uz nekdo rikal, ze asi bude dost slozite (ne-li >> nemozne) prohanet prez filtry (at uz antivirove,antispamove nebo jine) >> SSL, SSH a podobna spojeni. >> To zatim netusim vubec, jak to udelat. >> >> cRam >> >> >> >>> Zdravim, >>> >>> resili jste nekdo uz podobny problem? >>> >>> Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz >>> na viry a spyware a podobny plebs., >>> tak abych pokud mozno na klientskych stanicich nemusel konfigurovat >>> zadnou ochranu (maximalne vymeneni IE >>> za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o >>> Windows stanice. >>> >>> To same bych potreboval pro firewall. (Aby na stanicich nemusel byt >>> personal firewall). >>> >>> Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na >>> Debian a Ubuntu, ale pokud existuje distribuce, >>> ktera se timto primo zabyva...? >>> >>> Diky za tipy a za rady. >>> >>> cRam >>> >>> "Software is like sex, it's better when it's free" - Linus Torvalds >>> >>> >>> _______________________________________________ >>> Linux mailing list >>> Linux na linux.cz >>> http://www.linux.cz/mailman/listinfo/linux >>> >>> >>> >> _______________________________________________ >> Linux mailing list >> Linux na linux.cz >> http://www.linux.cz/mailman/listinfo/linux >> >> > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > From jmarek na jcu.cz Mon Dec 17 13:02:09 2007 From: jmarek na jcu.cz (Jan Marek) Date: Mon, 17 Dec 2007 13:02:09 +0100 Subject: Ubuntu ve =?iso-8859-2?Q?firemn=ED_s?= =?iso-8859-2?Q?=EDti=2E?= In-Reply-To: <475FE708.2050508@seznam.cz> References: <475D312A.6070207@seznam.cz> <475FE708.2050508@seznam.cz> Message-ID: <20071217120209.GA20900@hazard.jcu.cz> Dd, On Wed, Dec 12, 2007 at 02:50:00PM +0100, "Petr \"Qaxi\" Klíma" wrote: > Matej Cepl napsal(a): > > On 2007-12-10, 12:29 GMT, Petr "Qaxi" Klíma wrote: > mno ... > > > 3) Ubuntu neni cool, je to "za...." (zatrachtilá) distribuce založená na > "*.deb" balících (HUMOR) > -1 bod - už třetí den bojujeme s vytvořením vlastního seedu (přeci > nebudu na každý stroj sahat a spouštět postinstall script ...) toto jsem nepochopil? > > -1 bod - popisy nastavení na doc.ubuntu.com jsou většinou pro 6* a na > 7.10 nefungují to je pravda. > > -1 bod - balíčkovací systém který potřebuje nadstabu nadstavby abych > zjistil "který nainstalovaný balík obsahuje soubor pam_ldap.so" > (dpkg -> apt-get -> apt-file) to je unikátní přivětivost .... > (zaplať Marx za rpm -> yum ) (já vím, že má mouchy, ale rychlost fakt > neni všechno ...) Balickovaci system to umi, akorat chce celou cestu k tomu souboru a trosicku (opravdu jen mirne) precist man stranku: dpkg -S /lib/security/pam_ldap.so Alespon me to funguje skvele. A jeste jednu pouzivanou funkci: dpkg -L jmeno_baliku_bez_.deb (to kdyz se chci dozvedet, kde ma ten ktery balik konfiguracni soubory a nechce se mi hledat v /etc... Tohle ovsem vypise VSECHNY soubory v baliku, takze je to nekdy treba prohnat vhodnym grep-em) > > -1 bod - neschopnost vytvořit "instalační otisk" současného systému > (ano ... zapoměl jsem na hnusné RedHatí system-config-kickstart, ale to > debianisti nepoužívaj, vědí proč, instalák ho sice načte, ale > interpretuje asi tak 1/3 ... proč taky ... cool boys používají > debconf-get-selections s přehlednou syntaxí ...) dpkg --get-selections > neco na cilovem stroji: dpkg --set-selections < neco a pak apt-get -f install > > -0.01 bodu - ... a vůbec hrozně málo se to podobá distrům od RH ;-) > (opět POKŘIVENÝ HUMOR) zaplatpambu :-) > > +1 bod - na desktopu vše funguje jak je očekáváno > > => plusové body vyhrávají, vítězem je UBUNTU 7.10 (s výhledem na 8.04 LTS) > > > Na co jste se ptal ? A na co jste si stezoval? :-) > > -- > > Petr Klíma Zdravi Honza Marek -- Ing. Jan Marek | Nez mi poslete prilohu .doc, .xls University of South Bohemia | nebo .ppt, prectete si, prosim, Academic Computer Centre | WWW stranku uvedenou na poslednim Phone: +420-38-9032080 | radku signatury... http://www.gnu.org/philosophy/no-word-attachments.cs.html From dast na panelnet.cz Mon Dec 17 14:19:49 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 17 Dec 2007 14:19:49 +0100 Subject: Postfix a spam In-Reply-To: <013901c8408f$cfe9dbd0$01000002@fortech.local> References: <20071215130443.GA27237@panelnet.cz> <013901c8408f$cfe9dbd0$01000002@fortech.local> Message-ID: <20071217131949.GA21292@panelnet.cz> On Mon, Dec 17, 2007 at 10:32:59AM +0100, Dalibor Toman wrote: > On Saturday, December 15, 2007 2:04 PM , > Dalibor Straka wrote: > > > > Moje konfigurace postfixu odmita spamy v prijimacim rizeni. > > mam tomu ruzumnet tak, ze SPAM odmitnete jeste v SMTP relaci s > odesilacim serverem? Tj pred zarazenim zprav do fronty? > Jak jste toho dosahl? (bavim se o skutecne detekci spamu ne o > greylistingu, spf atd) > Konkretne o postfixu existuje nekolik navodu na internetu, jak toho dosahnout. Ja jsem zvolil asi nejrychlejsi variantu s poslouchajicim postfixem v rezimu proxy, ktery provede vsechny staticke kontroly vcetne greylistingu a pak teprve je e-mail predan (upozornuji, ze uz zde vetsina e-mailu neprojde) amavisu poslouchajicim na lokalnim socketu. Maji mezi sebou nejaky X-Forward protokol a dokud amavis nevrati clean, postfix neposle 250 OK, a kdyz prijde "jasny spam, treba >10", postfix vrati 550 (450). Pretizeni systemu se branim ihned v poslouchajicim postfix smtpd poctem procesu 20 a na kazdeho spamera max 10 spojeni najednou smtpd_client_connection_count_limit=10. Jine varianty jsou nechat poslouchat primo amavise, ale ten se zase musi slozite ptat na existenci uzivatele, pokud je mate v mysql. Mam nekolik instanci od maleho pomaleho serveru s par uzivately primo v systemu az po opravdu velke servery s tisici uzivateli a zatim vse jede uplne v pohode. Za zminku stoji, ze na ruznych mistech manualu (amavis/postfix/...) jsou zminky o nedoporucenem/nepodporovanem nastaveni. -- Dalibor Straka From dtoman na fortech.cz Mon Dec 17 14:48:33 2007 From: dtoman na fortech.cz (Dalibor Toman) Date: Mon, 17 Dec 2007 14:48:33 +0100 Subject: Postfix a spam References: <20071215130443.GA27237@panelnet.cz><013901c8408f$cfe9dbd0$01000002@fortech.local> <20071217131949.GA21292@panelnet.cz> Message-ID: <02aa01c840b3$84106610$01000002@fortech.local> On Monday, December 17, 2007 2:19 PM , Dalibor Straka wrote: > On Mon, Dec 17, 2007 at 10:32:59AM +0100, Dalibor Toman wrote: >> On Saturday, December 15, 2007 2:04 PM , >> Dalibor Straka wrote: >> > Konkretne o postfixu existuje nekolik navodu na internetu, jak toho > dosahnout. Ja jsem zvolil asi nejrychlejsi variantu s poslouchajicim > postfixem v rezimu proxy, ktery provede vsechny staticke kontroly > vcetne greylistingu a pak teprve je e-mail predan (upozornuji, ze uz > zde vetsina e-mailu neprojde) amavisu poslouchajicim na lokalnim > socketu. Maji mezi sebou nejaky X-Forward protokol a dokud amavis > nevrati clean, postfix neposle 250 OK, a kdyz prijde "jasny spam, > treba >10", postfix vrati 550 (450). > > Pretizeni systemu se branim ihned v poslouchajicim postfix smtpd > poctem procesu 20 a na kazdeho spamera max 10 spojeni najednou > smtpd_client_connection_count_limit=10. > > Jine varianty jsou nechat poslouchat primo amavise, ale ten se zase > musi slozite ptat na existenci uzivatele, pokud je mate v mysql. > > Mam nekolik instanci od maleho pomaleho serveru s par uzivately > primo > v systemu az po opravdu velke servery s tisici uzivateli a zatim vse > jede uplne v pohode. Za zminku stoji, ze na ruznych mistech manualu > (amavis/postfix/...) jsou zminky o nedoporucenem/nepodporovanem > nastaveni. > aha - klicovy bude asi ten postfix v proxy modu. Diky D. Toman From ondrej na cecak.cz Mon Dec 17 20:27:13 2007 From: ondrej na cecak.cz (Ondrej Cecak) Date: Mon, 17 Dec 2007 20:27:13 +0100 Subject: Postfix a spam In-Reply-To: References: Message-ID: <200712172027.13172.ondrej@cecak.cz> Dne sobota 15 prosinec 2007 11:19 Jan Volešák napsal(a): > ...to ja pouzivam pro více jak 40 domen spamassassin/clamav/amavis. Co je > nad 15 je ve 100% pripadu spam. Pozor, score je vzdy relativni k pravidlum, takze 15 je pravdepodobny spam mozna s vychozim nastavenim. Jinde to muze byt uplne jinak. -- Ondřej Čečák From dast na panelnet.cz Mon Dec 17 22:16:48 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 17 Dec 2007 22:16:48 +0100 Subject: Postfix a spam In-Reply-To: <02aa01c840b3$84106610$01000002@fortech.local> References: <20071217131949.GA21292@panelnet.cz> <02aa01c840b3$84106610$01000002@fortech.local> Message-ID: <20071217211647.GA25019@panelnet.cz> On Mon, Dec 17, 2007 at 02:48:33PM +0100, Dalibor Toman wrote: > > aha - klicovy bude asi ten postfix v proxy modu. > Postfix Before-Queue Content Filter http://www.postfix.org/SMTPD_PROXY_README.html Schema je asi nasledujici: postfix postfix smtpd --- nejaky_filter --- smtpd -> dal klasika (queue) port 25 ne !25 Bohuzel vzhledem k nizke pouzivanosti tohoto nastaveni jsem nasel malo referenci na webu, takze jsem si leckterym peklem prosel poctive sam . Napriklad v amavisovi musi byt $final_spam_destiny = D_REJECT; $final_virus_destiny = D_REJECT; -- Dalibor Straka From dast na panelnet.cz Tue Dec 18 00:43:44 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Tue, 18 Dec 2007 00:43:44 +0100 Subject: Zaseknuti cron jobu a neprovedeni ostatnich Message-ID: <20071217234344.GB25357@panelnet.cz> Ahoj, mam takovy neprijemny problem: Obcas se mi zasekne nejaky cron-job (napriklad: Nedostupnost zalohovaciho serveru, dojde misto a rsync uvizne, skript omylem trva dva dny, apod.). Bohuzel se mi pak neprovedou ostatni cron joby (nezrotujou logy, nevygenerujou statistiky). Nevite o nejakem lepsim cronu nebo finte - treba cekat na job maximalne 30 min apod.? Diky za rady, -- Dalibor Straka From fuky na sunstel.asu.cas.cz Tue Dec 18 01:29:11 2007 From: fuky na sunstel.asu.cas.cz (Jan Fuchs) Date: Tue, 18 Dec 2007 01:29:11 +0100 Subject: Zaseknuti cron jobu a neprovedeni ostatnich In-Reply-To: <20071217234344.GB25357@panelnet.cz> References: <20071217234344.GB25357@panelnet.cz> Message-ID: <20071218002910.GA20830@sunstel.asu.cas.cz> Zdravím, co to vyřešit např. takto: $ cat run.sh #!/bin/bash if [ "$#" -ne 2 ]; then echo "Usage: $0 program timeout" exit 1 fi PROGRAM="$1" TIMEOUT="$2" STEP=1 TIMEOUT_SIGKILL=0 $PROGRAM & PID_PROGRAM=$! while [ $(ps -p $PID_PROGRAM -o pid | wc -l) -ge 2 ]; do sleep $STEP TIMEOUT=$(($TIMEOUT-$STEP)) if [ "$TIMEOUT" -le 0 ]; then kill -SIGTERM $PID_PROGRAM ERROR=1 sleep $TIMEOUT_SIGKILL if [ $(ps -p $PID_PROGRAM -o pid | wc -l) -ge 2 ]; then kill -SIGKILL $PID_PROGRAM fi fi done if [ "$ERROR" == 1 ]; then echo "Exit failure" exit 1 fi echo "Exit success" exit 0 $ ./run.sh "sleep 3" 1 ./run.sh: line 29: 8762 Ukončen (SIGTERM) $PROGRAM Exit failure $ ./run.sh "sleep 3" 1000 Exit success S pozdravem Jan Fuchs 18. Dec (Tuesday) v 00:43:44 CET 2007, dast na panelnet.cz napsal(a): > treba cekat na job maximalne 30 min apod.? -- /************************************************************** * _ Žádný program není bezchybný, dokonalý ani nejlepší, * * °v° to samé platí i o lidech a nejen o nich. * * /(_)\ -- Jan Fuchs -- * * ^ ^ * * http://www.fuky.org ICQ: 200692177 * **************************************************************/ From cirkl na ccu.cz Tue Dec 18 01:30:36 2007 From: cirkl na ccu.cz (Stepan Cirkl) Date: Tue, 18 Dec 2007 01:30:36 +0100 Subject: Transparentni ochrana In-Reply-To: <476668F1.8060205@seznam.cz> References: <475FD334.2040409@seznam.cz> <4762AE2E.7020208__27366.4953456775$1197649503$gmane$org@seznam.cz> <476668F1.8060205@seznam.cz> Message-ID: <476714AC.4060705@ccu.cz> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ty predtim zminene produkty proste slouzi ke kontrole provozu na vstupu/vystupu ze site. Tecka. Rozhodne Vam nemuze nikdo seriozni tvrdit, ze pak uz na stanici nic nepotrebujete. Mnou zminovany Fortinet to napriklad resi tak, ze maji FrotiGate = vstupni prvek do site, neco co poptavate, a popak FortiClient. Bud slouzi jako VPN klient, nebo v rozsirene (a placene) verzi i jako antivir a pod. Pokud potrebujete setrit a vstupni maily si pohlidate na brane a mate zabezpecene klientske pocitace, tak muzete vynechat s relativne malym rizikem ten mailserver. Jinak ani UNIX neni 100% garanci bezpecnosti. Nespolehal bych se jen na to, ze mam neco, co nema 90% ostatnich lidi. Stepan Cirkl Cramer wrote: > No na stanicich pobezi windows. > > Co se tyka serveru (fw,mail...), tak tam pochopitelne bude UNIX / > Linux. > > Ano, s tou sifrovanou komunikaci je celkem problem v tomhle ohledu. > > > S tim vyuzitim jako terminalu to take bohuzel nepripada v uvahu. > > No a jakym zpusobem maji tyto veci resene ty zminovane komerni > produkty? > > cRam > >> K tomu také musím říct, že pokud stanice nepřeinstalujete na >> UNIX, pak budete potřebovat ochranu minimálně: >> >> 1. Na FW 2. Na stanicích 3. Na mailovém serveru >> >> Jinak máte smůlu, jak už o tom tady někdo psal. Stačí, když někdo >> donese nakažené USB a zastrčí ho do díry... Donese svůj COMP a >> píchne ho do sítě. P2P komunikace se také používá šifrovaně (teda >> apoň rozumní lidé), takže to taky neodstíníte. Rozumní lidé >> používají také IMAPS a POP3S, tam si taky neškrtnete. >> >> Viděl bych ještě jednu možnost ochrany a to nedovolit spouštět na >> MS Win žádné programy, používat to jako terminál, ale to nevím, >> zda by vyhovovalo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.5 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHZxSszf6Y1Rt92UwRAhROAKCtmE9VXir3y4lDuyrchbt73yArKACfe5BJ UgwPCSVvqj9zXsEs64u1pgs= =cbRf -----END PGP SIGNATURE----- From ber na eunet.cz Tue Dec 18 07:38:48 2007 From: ber na eunet.cz (Milan BERKA) Date: Tue, 18 Dec 2007 07:38:48 +0100 Subject: Transparentni ochrana In-Reply-To: <476668F1.8060205__37615.0839416825$1197893925$gmane$org@seznam.cz> References: <475FD334.2040409@seznam.cz> <4762AE2E.7020208__27366.4953456775$1197649503$gmane$org@seznam.cz> <476668F1.8060205__37615.0839416825$1197893925$gmane$org@seznam.cz> Message-ID: Nepostřehl jsem přesně které produkty, ale na stanici je komunikace již dešifrovaná, mezi mail serverem a klientem je sice komunikace šifrovaná, ale na mailserveru je většinou mail dešifrován (protože komunikace mezi mail servery je většinou nešifrovaná. Pravda eXchange např. šifruje ukládání dat na disk, ale dá se nacpat mezi to. Filtry na firewallu většinou odstíní komunikaci na porty, pak to tak nezatěžuje klienty a taky odstíní servery, protože řadu věcí a spamu odfiltrují před mailovým serverem, ten se pak zbaví zátěže různých SPAM útoků a může v klidu řešit komunikaci mailem např. uvnitř firmy. Dá se to řešit taky tak, že uděláte vnější a vnitřní mail server a SPAM filtr nasadíte venku. Pak pokud komunikují zaměstnanci uvnitř, jdou pouze přes vnitřní server a ten je méně zatížen. Řešení je vždy víc. Různé řešení na stanici a na serveru obecně umožní zvýšit bezpečnost (různí výrobci, různá aktualizace různé nedostatky se vzájemně eliminují...) Řada řešení je zdarma, pokud budet postupovat vhodně. SpamAssasin, ClamAV, atd. FW taky. Komerční produkty. No, některé šifrovanou komunikaci dešifrují (ale musíte jim poskytnout klíče) a to není moc čisté řešení = např. přístup zaměstnance do banky. Dá se to vyblokovat, ale mi se to osobně nelíbí. Neříkám, že komerční produkty nejsou dobré, pokud máte dost peněz FW Sidewinder, WebWasher, McAfee, Symantec, pokud ne, dá se to řešit s trochou snahy i zadarmo, ale následky jsou na Vás... Jinak můžete alibisticky říct, když se něco podělá : "No co já, chudáček malý, I Symantec to posral..." a jste z toho venku. MB. Cramer napsal(a): > No na stanicich pobezi windows. > > Co se tyka serveru (fw,mail...), tak tam pochopitelne bude UNIX / Linux. > > Ano, s tou sifrovanou komunikaci je celkem problem v tomhle ohledu. > > S tim vyuzitim jako terminalu to take bohuzel nepripada v uvahu. > > No a jakym zpusobem maji tyto veci resene ty zminovane komerni produkty? > > cRam > >> K tomu také musím říct, že pokud stanice nepřeinstalujete na UNIX, pak >> budete potřebovat ochranu minimálně: >> >> 1. Na FW >> 2. Na stanicích >> 3. Na mailovém serveru >> >> Jinak máte smůlu, jak už o tom tady někdo psal. Stačí, když někdo donese >> nakažené USB a zastrčí ho do díry... Donese svůj COMP a píchne ho do >> sítě. P2P komunikace se také používá šifrovaně (teda apoň rozumní lidé), >> takže to taky neodstíníte. Rozumní lidé používají také IMAPS a POP3S, >> tam si taky neškrtnete. >> >> Viděl bych ještě jednu možnost ochrany a to nedovolit spouštět na MS Win >> žádné programy, používat to jako terminál, ale to nevím, zda by vyhovovalo. >> >> Milan Berka >> >> Cramer napsal(a): >> >>> Tak abych to trochu upresnil. >>> >>> Rad bych si postavil neco na zpusob tohoto produktu >>> >>> http://www.zyxel.cz/web/product_family_detail.php?PC1indexflag=20040908175941&CategoryGroupNo=4327696E-D248-4212-9CC7-97A5725A2764 >>> >>> Nejake napady? >>> >>> Pravda je, to co tu uz nekdo rikal, ze asi bude dost slozite (ne-li >>> nemozne) prohanet prez filtry (at uz antivirove,antispamove nebo jine) >>> SSL, SSH a podobna spojeni. >>> To zatim netusim vubec, jak to udelat. >>> >>> cRam >>> >>> >>> >>>> Zdravim, >>>> >>>> resili jste nekdo uz podobny problem? >>>> >>>> Potrebuju pred sit umistit router, ktery by mi filtroval sitovy provoz >>>> na viry a spyware a podobny plebs., >>>> tak abych pokud mozno na klientskych stanicich nemusel konfigurovat >>>> zadnou ochranu (maximalne vymeneni IE >>>> za FFox a podobne upravy.). Doplnim jeste, ze se jedna prevazne o >>>> Windows stanice. >>>> >>>> To same bych potreboval pro firewall. (Aby na stanicich nemusel byt >>>> personal firewall). >>>> >>>> Momentalne resim, jakym zpusobem jej nakonfigurovat. Jsem zvykly na >>>> Debian a Ubuntu, ale pokud existuje distribuce, >>>> ktera se timto primo zabyva...? >>>> >>>> Diky za tipy a za rady. >>>> >>>> cRam >>>> >>>> "Software is like sex, it's better when it's free" - Linus Torvalds >>>> >>>> >>>> _______________________________________________ >>>> Linux mailing list >>>> Linux na linux.cz >>>> http://www.linux.cz/mailman/listinfo/linux >>>> >>>> >>>> >>> _______________________________________________ >>> Linux mailing list >>> Linux na linux.cz >>> http://www.linux.cz/mailman/listinfo/linux >>> >>> >> _______________________________________________ >> Linux mailing list >> Linux na linux.cz >> http://www.linux.cz/mailman/listinfo/linux >> >> > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > From spam na nagano.cz Tue Dec 18 09:15:09 2007 From: spam na nagano.cz (Ladislav Vaiz) Date: Tue, 18 Dec 2007 09:15:09 +0100 Subject: Zaseknuti cron jobu a neprovedeni ostatnich In-Reply-To: <20071217234344.GB25357@panelnet.cz> References: <20071217234344.GB25357@panelnet.cz> Message-ID: <4767818D.3000005@nagano.cz> Zkuste nespoustet zalohu z /etc/cron.daily, ale primo z crontabu. Zase to ma nevyhodu, ze pokud uvizne dva dny, tak pobezi vicekrat. Ale to uz by melo byt resitelne necim jako /var/run/* Lada Dalibor Straka napsal(a): > Ahoj, > > mam takovy neprijemny problem: Obcas se mi zasekne nejaky cron-job > (napriklad: Nedostupnost zalohovaciho serveru, dojde misto a rsync > uvizne, skript omylem trva dva dny, apod.). > > Bohuzel se mi pak neprovedou ostatni cron joby (nezrotujou logy, > nevygenerujou statistiky). Nevite o nejakem lepsim cronu nebo > finte - treba cekat na job maximalne 30 min apod.? > > Diky za rady, > -- Dalibor Straka > > From cramers na seznam.cz Tue Dec 18 22:55:51 2007 From: cramers na seznam.cz (Cramer) Date: Tue, 18 Dec 2007 22:55:51 +0100 Subject: problem s apt-get Message-ID: <476841E7.4050700@seznam.cz> Zdravim, muzete mi prosim poradit co s tim? root na james:~# apt-get remove postgresql-8.1 postgresql-client-8.1 postgresql-client-common postgresql-common Čtu seznamy balíků... Hotovo Vytvářím strom závislostí... Hotovo Následující balíky budou ODSTRANĚNY: postgresql-8.1 postgresql-client-8.1 postgresql-client-common postgresql-common 0 aktualizováno, 0 nově instalováno, 4 k odstranění a 0 neaktualizováno. Potřebuji stáhnout 0B archivů. Po rozbalení bude na disku uvolněno 17,7MB. Chcete pokračovat [Y/n]? Y (Čtu databázi ... nyní je nainstalováno 53519 souborů a adresářů.) Odinstalování balíku postgresql-8.1 ... * Stopping PostgreSQL 8.1 database server [ ok ] Odinstalování balíku postgresql-client-8.1 ... Odinstalování balíku postgresql-common ... Odinstalování balíku postgresql-client-common ... Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at /usr/local/share/perl/5.8.7/Errno.pm line 11. Compilation failed in require at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. BEGIN failed--compilation aborted at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. Compilation failed in require at /usr/bin/debsums line 11. BEGIN failed--compilation aborted at /usr/bin/debsums line 11. E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; fi' E: Sub-process returned an error code Diky cRam From slavek.banko na axis.cz Tue Dec 18 23:19:47 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Tue, 18 Dec 2007 23:19:47 +0100 Subject: problem s apt-get In-Reply-To: <476841E7.4050700@seznam.cz> References: <476841E7.4050700@seznam.cz> Message-ID: <200712182319.48224.slavek.banko@axis.cz> Máte v pořádku funkční debsums? Zkuste nejdříve aptitude install debsums. Slávek -- Dne úterý 18 prosinec 2007 22:55 Cramer napsal(a): > Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match > executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at > /usr/local/share/perl/5.8.7/Errno.pm line 11. > Compilation failed in require at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > BEGIN failed--compilation aborted at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > Compilation failed in require at /usr/bin/debsums line 11. > BEGIN failed--compilation aborted at /usr/bin/debsums line 11. > E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/debsums > ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; > fi' E: Sub-process returned an error code > From postmaster na pozitiv.sk Wed Dec 19 08:20:54 2007 From: postmaster na pozitiv.sk (System Anti-Virus Administrator) Date: 19 Dec 2007 07:20:54 -0000 Subject: virus found in sent message "Re: Secure delivery" Message-ID: Attention: linux na linux.cz A virus was found in an Email message you sent. This Email scanner intercepted it and stopped the entire message reaching its destination. The virus was reported to be: Worm.SomeFool.P Please update your virus scanner or contact your IT support personnel as soon as possible as you may have a virus on your system. Your message was sent with the following envelope: MAIL FROM: linux na linux.cz RCPT TO: euroactivity na vipmedia.sk ... and with the following headers: --- MAILFROM: linux na linux.cz RCPTTO: euroactivity na vipmedia.sk IP-Addr: 80.94.50.90 Received: from unknown (HELO vipmedia.sk) (80.94.50.90) by 0 with SMTP; 19 Dec 2007 07:20:53 -0000 From: linux na linux.cz To: euroactivity na vipmedia.sk Subject: Re: Secure delivery Date: Wed, 19 Dec 2007 08:20:57 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0016----=_NextPart_000_0016" X-Priority: 3 X-MSMail-Priority: Normal --- From cramers na seznam.cz Wed Dec 19 11:01:38 2007 From: cramers na seznam.cz (Cramer) Date: Wed, 19 Dec 2007 11:01:38 +0100 Subject: problem s apt-get In-Reply-To: <200712182319.48224.slavek.banko@axis.cz> References: <476841E7.4050700@seznam.cz> <200712182319.48224.slavek.banko@axis.cz> Message-ID: <4768EC02.1010601@seznam.cz> Slávek Banko napsal(a): > Máte v pořádku funkční debsums? > Zkuste nejdříve aptitude install debsums. > > Slávek > Zdravim, Tak tim to bohuzel nebude :( root na james:~# apt-get install debsums Čtu seznamy balíků... Hotovo Vytvářím strom závislostí... Hotovo debsums je již nejnovější verze. 0 aktualizováno, 0 nově instalováno, 0 k odstranění a 0 neaktualizováno. From slavek.banko na axis.cz Wed Dec 19 11:52:17 2007 From: slavek.banko na axis.cz (Slavek Banko) Date: Wed, 19 Dec 2007 11:52:17 +0100 Subject: problem s apt-get In-Reply-To: <4768EC02.1010601@seznam.cz> References: <476841E7.4050700@seznam.cz> <200712182319.48224.slavek.banko@axis.cz> <4768EC02.1010601@seznam.cz> Message-ID: <200712191152.17511.slavek.banko@axis.cz> Dne středa 19 prosinec 2007 11:01 Cramer napsal(a): > Slávek Banko napsal(a): > > Máte v pořádku funkční debsums? > > Zkuste nejdříve aptitude install debsums. > > > > Slávek > > Zdravim, > > Tak tim to bohuzel nebude :( > > > root na james:~# apt-get install debsums > Čtu seznamy balíků... Hotovo > Vytvářím strom závislostí... Hotovo > debsums je již nejnovější verze. > 0 aktualizováno, 0 nově instalováno, 0 k odstranění a 0 > neaktualizováno. A je debsums funkční? Z minulého výpisu to totiž vypadalo na problém se spouštěním debsums. Slávek From katerina.bubenickova na plbohnice.cz Wed Dec 19 14:10:20 2007 From: katerina.bubenickova na plbohnice.cz (Katerina Bubenickova) Date: Wed, 19 Dec 2007 14:10:20 +0100 Subject: groupwise a zobrazovani vlaken v evolution In-Reply-To: <20071215182203.841.0@paddy.troja.mff.cuni.cz> References: <20071215182203.841.0@paddy.troja.mff.cuni.cz> Message-ID: <4769183C.4060402@plbohnice.cz> >> In-Reply-To: <20071206112612.GA12596 na pzkagis.cz >> > >> > > Jestli to v References a Reply-To vypadalo *přesně takhle* (i s tím > mailto:), tak se nedivím, že to nefungovalo. > > To mailto se tam zrejme dostalo pri kopirovani :-) --Katerina Bubenickova From dtoman na fortech.cz Wed Dec 19 16:46:22 2007 From: dtoman na fortech.cz (Dalibor Toman) Date: Wed, 19 Dec 2007 16:46:22 +0100 Subject: Postfix a spam References: <20071217131949.GA21292@panelnet.cz><02aa01c840b3$84106610$01000002@fortech.local> <20071217211647.GA25019@panelnet.cz> Message-ID: <019901c84256$4e0acb10$28010101@fortech.local> On Monday, December 17, 2007 10:16 PM , Dalibor Straka wrote: >> > Postfix Before-Queue Content Filter > http://www.postfix.org/SMTPD_PROXY_README.html > > Schema je asi nasledujici: > postfix postfix > smtpd --- nejaky_filter --- smtpd -> dal klasika (queue) > port 25 ne !25 > > Bohuzel vzhledem k nizke pouzivanosti tohoto nastaveni jsem > nasel malo referenci na webu, takze jsem si leckterym peklem > prosel poctive sam . > > Napriklad v amavisovi musi byt > $final_spam_destiny = D_REJECT; > $final_virus_destiny = D_REJECT; > potiz je tam, ze zrejme budou potize na zatizenejsich strojich (i v tom dokumentu je to jako nevyhoda zminovano). Amavis/spamassasin je nekdy dost pomaly :-( Kolega, ktery u nas mail server konfiguroval se priznal, ze tuhle stranku studoval (a z vykonovych duvodu nepouzil). Alespon mam vetsi jistotu, ze nam neco dulezitecho neuniklo. Diky D. Toman From cramers na seznam.cz Wed Dec 19 17:29:28 2007 From: cramers na seznam.cz (Cramer) Date: Wed, 19 Dec 2007 17:29:28 +0100 Subject: problem s apt-get In-Reply-To: <200712191152.17511.slavek.banko@axis.cz> References: <476841E7.4050700@seznam.cz> <200712182319.48224.slavek.banko@axis.cz> <4768EC02.1010601@seznam.cz> <200712191152.17511.slavek.banko@axis.cz> Message-ID: <476946E8.8030508@seznam.cz> Slavek Banko napsal(a): > Dne středa 19 prosinec 2007 11:01 Cramer napsal(a): > >> Slávek Banko napsal(a): >> >>> Máte v pořádku funkční debsums? >>> Zkuste nejdříve aptitude install debsums. >>> >>> Slávek >>> >> Zdravim, >> >> Tak tim to bohuzel nebude :( >> >> >> root na james:~# apt-get install debsums >> Čtu seznamy balíků... Hotovo >> Vytvářím strom závislostí... Hotovo >> debsums je již nejnovější verze. >> 0 aktualizováno, 0 nově instalováno, 0 k odstranění a 0 >> neaktualizováno. >> > > A je debsums funkční? Z minulého výpisu to totiž vypadalo na problém se > spouštěním debsums. > root na james:~# debsums Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at /usr/local/share/perl/5.8.7/Errno.pm line 11. Compilation failed in require at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. BEGIN failed--compilation aborted at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. Compilation failed in require at /usr/bin/debsums line 11. BEGIN failed--compilation aborted at /usr/bin/debsums line 11. Ano, vypada to na chybu s debsums.. Preinstalovani debsums nepomuze. Nejaky napad, co s tim? c. > Slávek > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > From dast na panelnet.cz Wed Dec 19 17:35:57 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Wed, 19 Dec 2007 17:35:57 +0100 Subject: Postfix a spam In-Reply-To: <019901c84256$4e0acb10$28010101@fortech.local> References: <20071217211647.GA25019@panelnet.cz> <019901c84256$4e0acb10$28010101@fortech.local> Message-ID: <20071219163557.GB18967@panelnet.cz> On Wed, Dec 19, 2007 at 04:46:22PM +0100, Dalibor Toman wrote: > On Monday, December 17, 2007 10:16 PM , > Dalibor Straka wrote: > > >> > > Postfix Before-Queue Content Filter > > http://www.postfix.org/SMTPD_PROXY_README.html > > > > Schema je asi nasledujici: > > postfix postfix > > smtpd --- nejaky_filter --- smtpd -> dal klasika (queue) > > port 25 ne !25 > > > > Bohuzel vzhledem k nizke pouzivanosti tohoto nastaveni jsem > > nasel malo referenci na webu, takze jsem si leckterym peklem > > prosel poctive sam . > > > > Napriklad v amavisovi musi byt > > $final_spam_destiny = D_REJECT; > > $final_virus_destiny = D_REJECT; > > > > potiz je tam, ze zrejme budou potize na zatizenejsich strojich (i v > tom dokumentu je to jako nevyhoda zminovano). Amavis/spamassasin je > nekdy dost pomaly :-( > > Kolega, ktery u nas mail server konfiguroval se priznal, ze tuhle > stranku studoval (a z vykonovych duvodu nepouzil). Alespon mam vetsi > jistotu, ze nam neco dulezitecho neuniklo. > Je otazka jestli skutecne usetrite vykon, kdyz stejne ten samy e-mail musite zkontrolovat amavisem(...). Jen pri velkem navalu to odlozite na pozdeji a stroj je po tu dobu pretizeny. Naopak kdyz se objevi nejaka nezdrava zatez, server zacne odmitat spojeni a urcite nebyla zpusobena radnym pouzivanim. Behem kratkeho pretizeni muze server odmitnout i korektni e-maily, ale to odesilajici MTA nepozna od greylistingu, protoze dostane 450, a nebo se nepripoji vubec a zkusi to za chvili znovu. Vykon se da dobre ladit, napriklad pro amavis tmp jsem pouzil ramdisk. Navic musite generovat nejaka oznameni o nedorucitelnosti, rozhodnout jestli budete odesilatele informovat, ze jeho mail byl pozran antispamem/antivirem apod. coz pripadne opet zatizi stroj, resit zahozene e-maily. Pri opravdu velkych mail serverech lze zatez rozdelit na nekolik stroju a je po starosti. Na jeden z mych mailserver dojde (tj. objevi se spojeni na port 25) 100000 mailu/den. A stroj si vrni, skoro porad se flaka. Taky se ke scannerum dostane par procent e-mailu. -- Dalibor Straka From janda na netbox.cz Wed Dec 19 17:45:36 2007 From: janda na netbox.cz (Petr Janda) Date: Wed, 19 Dec 2007 17:45:36 +0100 Subject: problem s apt-get In-Reply-To: <476946E8.8030508@seznam.cz> References: <476841E7.4050700@seznam.cz> <200712182319.48224.slavek.banko@axis.cz> <4768EC02.1010601@seznam.cz> <200712191152.17511.slavek.banko@axis.cz> <476946E8.8030508@seznam.cz> Message-ID: <20071219164536.GI4767@prcek> > > root na james:~# debsums > Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match > executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at > /usr/local/share/perl/5.8.7/Errno.pm line 11. > Compilation failed in require at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > BEGIN failed--compilation aborted at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > Compilation failed in require at /usr/bin/debsums line 11. > BEGIN failed--compilation aborted at /usr/bin/debsums line 11. > > Ano, vypada to na chybu s debsums.. > Preinstalovani debsums nepomuze. > Nejaky napad, co s tim? > > c. Podivat se, co je v tom perlim nesmyslu na zminovanych radkach? Mozna neco chybi perlu. S pozdravem Petr Janda -- email: /bin/sh -c 'A=netbox; B=janda; printf "%s@%s.cz\n" ${B} ${A}' From cramers na seznam.cz Wed Dec 19 17:53:44 2007 From: cramers na seznam.cz (Cramer) Date: Wed, 19 Dec 2007 17:53:44 +0100 Subject: problem s apt-get In-Reply-To: <20071219164536.GI4767@prcek> References: <476841E7.4050700@seznam.cz> <200712182319.48224.slavek.banko@axis.cz> <4768EC02.1010601@seznam.cz> <200712191152.17511.slavek.banko@axis.cz> <476946E8.8030508@seznam.cz> <20071219164536.GI4767@prcek> Message-ID: <47694C98.6020503@seznam.cz> Petr Janda napsal(a): >> root na james:~# debsums >> Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match >> executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at >> /usr/local/share/perl/5.8.7/Errno.pm line 11. >> Compilation failed in require at >> /usr/local/share/perl/5.8.7/File/Temp.pm line 144. >> use 5.004; use strict; use Carp; use File::Spec 0.8; use File::Path qw/ rmtree /; use Fcntl 1.03; use IO::Seekable; # For SEEK_* 144# use Errno; require VMS::Stdio if $^O eq 'VMS'; >> BEGIN failed--compilation aborted at >> /usr/local/share/perl/5.8.7/File/Temp.pm line 144. >> Compilation failed in require at /usr/bin/debsums line 11. >> BEGIN failed--compilation aborted at /usr/bin/debsums line 11. >> >> Ano, vypada to na chybu s debsums.. >> Preinstalovani debsums nepomuze. >> Nejaky napad, co s tim? >> >> c. >> > > Podivat se, co je v tom perlim nesmyslu na zminovanych radkach? > Mozna neco chybi perlu. > > > S pozdravem > > Petr Janda > -- > email: /bin/sh -c 'A=netbox; B=janda; printf "%s@%s.cz\n" ${B} ${A}' > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > From xkenni na seznam.cz Wed Dec 19 17:57:32 2007 From: xkenni na seznam.cz (Filip Aujezdsky) Date: Wed, 19 Dec 2007 17:57:32 +0100 Subject: problem s apt-get In-Reply-To: <20071219164536.GI4767@prcek> References: <476841E7.4050700@seznam.cz> <200712182319.48224.slavek.banko@axis.cz> <4768EC02.1010601@seznam.cz> <200712191152.17511.slavek.banko@axis.cz> <476946E8.8030508@seznam.cz> <20071219164536.GI4767@prcek> Message-ID: <47694D7C.5050402@seznam.cz> Petr Janda napsal(a): >> root na james:~# debsums >> Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match >> executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at >> /usr/local/share/perl/5.8.7/Errno.pm line 11. >> Compilation failed in require at >> /usr/local/share/perl/5.8.7/File/Temp.pm line 144. >> BEGIN failed--compilation aborted at >> /usr/local/share/perl/5.8.7/File/Temp.pm line 144. >> Compilation failed in require at /usr/bin/debsums line 11. >> BEGIN failed--compilation aborted at /usr/bin/debsums line 11. >> >> Ano, vypada to na chybu s debsums.. >> Preinstalovani debsums nepomuze. >> Nejaky napad, co s tim? >> >> c. >> > > dalsi je napriklad use Socket 1.3; > Podivat se, co je v tom perlim nesmyslu na zminovanych radkach? > Mozna neco chybi perlu. > > > S pozdravem > > Petr Janda > -- > email: /bin/sh -c 'A=netbox; B=janda; printf "%s@%s.cz\n" ${B} ${A}' > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux > > From dtoman na fortech.cz Wed Dec 19 18:30:40 2007 From: dtoman na fortech.cz (Dalibor Toman) Date: Wed, 19 Dec 2007 18:30:40 +0100 Subject: Postfix a spam References: <20071217211647.GA25019@panelnet.cz><019901c84256$4e0acb10$28010101@fortech.local> <20071219163557.GB18967@panelnet.cz> Message-ID: <01d201c84264$dffece00$28010101@fortech.local> >> > Je otazka jestli skutecne usetrite vykon, kdyz stejne ten samy > e-mail > musite zkontrolovat amavisem(...). Jen pri velkem navalu to odlozite > na pozdeji a stroj je po tu dobu pretizeny. Naopak kdyz se objevi > nejaka nezdrava zatez, server zacne odmitat spojeni a urcite nebyla > zpusobena radnym pouzivanim. Behem kratkeho pretizeni muze server > odmitnout i korektni e-maily, ale to odesilajici MTA nepozna od > greylistingu, protoze dostane 450, a nebo se nepripoji vubec a zkusi > to za chvili znovu. potiz je v tom, ze v tom README zminuji, ze muze dojit k tomu, ze testovani mailu trva tak dlouho, ze odesilajici ukonci spojeni driv (nechce se mu cekat dostatecne dlouho na to az amavis a spol otestuji zpravu a vydaji zaverecny verdikt). Jak se zachova postfix (mozna zpravu doruci) netusim. V kazdem pripade odesilajici pak bude s tou zpravou otravovat (zbytecne) vickrat. Greylisting nepouzivame - protoze dulezite zdroje mailu (freemailery napriklad) se s tim nedokazi vyrovnat (odesilaji pokazde z jinych IP ci jaksi vubec na opakovane odesilani kaslou). Chodi Ti spolehlive maily od gmailu, seznamu a spol ? > Vykon se da dobre ladit, napriklad pro amavis tmp jsem pouzil > ramdisk. btw: v tmp se nam hromadi zbytky po rozparsovani zprav amavisem (adresar se zbytky ulozenych soucasti zpravy). Za nejakych okolnosti po sobe amavis neuklidi (vetsinou docasna data smaze). Musime ten adresar periodicky promazavat. Deje se to i na Tve instalaci? (nam se to stejne chovalo i na starsim serveru s qmailem) > Navic musite generovat nejaka oznameni o nedorucitelnosti, > rozhodnout > jestli budete odesilatele informovat, ze jeho mail byl pozran > antispamem/antivirem apod. coz pripadne opet zatizi stroj, resit > zahozene e-maily. >Pri opravdu velkych mail serverech lze zatez > rozdelit na nekolik stroju a je po starosti. jasne Diky D. Toman From linux na grafon.sk Wed Dec 19 21:15:09 2007 From: linux na grafon.sk (Vladimir Rengevic) Date: Wed, 19 Dec 2007 21:15:09 +0100 Subject: Problem s instalaciou certifikatu Message-ID: <47697BCD.9090804@grafon.sk> Pekny den vsetkym! Mam server Fedoru 6 Zend. U DT-CA som poziadal o certifikat pre server. Ziadost som vyrobil nasledovne: najprv kluc: $ openssl genrsa -des3 -out server.key 1024 potom ziadost: $ openssl req -new -key server.key -out server.csr zo suboru server.csr mi cert. autorita vytvorila certifikat server.pem ktory som podla pokynov premenoval na server.crt a nasledne umiestnil subory: /etc/httpd/conf/ssl.crt/server.crt /etc/httpd/conf/ssl.key/server.key No a po restarte httpd tento nenabehne a do logu dostanem hlasky: ********************************************************************** [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN) `www.grafon.sk' does NOT match server name!? [Wed Dec 19 21:03:52 2007] [notice] Digest: generating secret for digest authentication ... [Wed Dec 19 21:03:52 2007] [notice] Digest: done [Wed Dec 19 21:03:52 2007] [notice] mod_python: Creating 4 session mutexes based on 256 max processes and 0 max threads. [Wed Dec 19 21:03:52 2007] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?) [Wed Dec 19 21:03:52 2007] [warn] RSA server certificate CommonName (CN) `www.grafon.sk' does NOT match server name!? [Wed Dec 19 21:03:52 2007] [notice] Apache/2.2.6 (Unix) DAV/2 mod_auth_kerb/5.3 mod_auth_pgsql/2.0.3 mod_python/3.2.8 Python/2.4.4 mod_ssl/2.2.6 OpenSSL/0.9.8b mod_perl/2.0.2 Perl/v5.8.8 configured -- resuming normal operations ********************************************************************** Samozrejme www.grafon.sk existuje, je v DNS ale nie je to A zaznam, je to len CNAME. Zaznam o www.grafon.sk je aj v subore /etc/hosts. Priznam sa ze s tymto nejak moc skusenosti nemam. Nasmeruje ma niekto prosim? ;o) Dakuejm! Vlado -- Ing. Vladimir Rengevic GRAFON creative team Tranovskeho 19, Liptovsky Mikulas, Slovakia phone: +421/44/5526153, fax: +421/44/5621454 mobil: +421/905/642799 www.grafon.sk From xmizi na volny.cz Wed Dec 19 22:10:37 2007 From: xmizi na volny.cz (Miroslav Zidek) Date: Wed, 19 Dec 2007 22:10:37 +0100 Subject: Problem s instalaciou certifikatu In-Reply-To: <47697BCD.9090804@grafon.sk> References: <47697BCD.9090804@grafon.sk> Message-ID: <476988CD.1000708@volny.cz> Dne 19.12.2007 21:15 Vladimir Rengevic napsal: > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN) > `www.grafon.sk' does NOT match server name!? a co mate nastvene v direktive ServerName primo v apachi? Myslim ze tam nemate www.grafon.sk a to prave vadi. Mrknete tedy do httpd.conf (nebo pokud se jedna o virtual tak kamkoliv kde mate konfiguraci) a zkontroujte, zda tam skutecne je ServerName www.grafon.sk:443 Miroslav Žídek -- mizi(zavináč)mzidek.net charset: iso-8859-2 http://www.mzidek.net/ From rostislav.matl na gmail.com Wed Dec 19 22:31:20 2007 From: rostislav.matl na gmail.com (rostislav.matl na gmail.com) Date: Wed, 19 Dec 2007 13:31:20 -0800 (PST) Subject: 64bit versus 32bit OS References: Message-ID: <45d8c74e-6b45-4869-a293-1f09fcad4193@j20g2000hsi.googlegroups.com> Dovolim si par postrehu z praxe jako uzivatel plne 64bit. systemu (Gentoo AMD64 :). Maloktera aplikace ci knihovna umi vyuzit vyhody nove platformy, vsehovsudy jsem si vsiml nejake implementace AES pro 64bit, ktera by snad mohla byt rychlejsi. Ostatni to nechavaji vesmes na kompilatoru a bohuzel nektere programy psane "optimisticky" jako 32bitove bud nejdou zkompilovat nebo padaji. Nektere programy nemaji 64bit. verze - flash plugin, java applet plugin pro firefox nebo java webstart (jnlp). Rad bych, kdyby nekdo pridal dalsi priklady, uz proto, ze by se pripadny vahavec vyhnul neprijemnym prkvapenim. U posledne jmenovaneho existuje sice open-source implementace a applet plaugin snad bude v novem JDK, ale bud to neni "ono" (at uz "ono ma byt cokoliv) nebo to neni jeste. Podle meho nazoru neni kam spechat, nezaznamenal jsem zadny zasadni prinos, zato par problemu, byt malych. Muzete uvest nejake palikace, ktere na 64bitu poskytuji vyrazne/znatelne lepsi vykon ? From rostislav.matl na gmail.com Wed Dec 19 22:34:54 2007 From: rostislav.matl na gmail.com (rostislav.matl na gmail.com) Date: Wed, 19 Dec 2007 13:34:54 -0800 (PST) Subject: 64bit versus 32bit OS References: Message-ID: Jeste jsem si vzpomnel na jeden program, ktery ma problemy na 64bitu - eclipse. From dast na panelnet.cz Thu Dec 20 02:31:46 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Thu, 20 Dec 2007 02:31:46 +0100 Subject: 64bit versus 32bit OS In-Reply-To: <45d8c74e-6b45-4869-a293-1f09fcad4193@j20g2000hsi.googlegroups.com> References: <45d8c74e-6b45-4869-a293-1f09fcad4193@j20g2000hsi.googlegroups.com> Message-ID: <20071220013146.GA23044@panelnet.cz> Ahoj, On Wed, Dec 19, 2007 at 01:31:20PM -0800, rostislav.matl na gmail.com wrote: > Dovolim si par postrehu z praxe jako uzivatel plne 64bit. systemu > (Gentoo AMD64 :). > Maloktera aplikace ci knihovna umi vyuzit vyhody nove platformy, > vsehovsudy jsem si vsiml nejake implementace AES pro 64bit, ktera by > snad mohla byt rychlejsi. > Maloktera stara aplikace. Ja vsechny nove casto opatruji #ifdef x86_64 .... Protoze muzu napriklad mapovat vsechny soubory do pameti a nestarat se o delku. > Nektere programy nemaji 64bit. verze - flash plugin, java applet > plugin pro firefox nebo java webstart (jnlp). Rad bych, kdyby nekdo > pridal dalsi priklady, uz proto, ze by se pripadny vahavec vyhnul > neprijemnym prkvapenim. > ...kodeky .dll pro mplayer a podobne vrazdy. > U posledne jmenovaneho existuje sice open-source implementace a applet > plaugin snad bude v novem JDK, ale bud to neni "ono" (at uz "ono ma > byt cokoliv) nebo to neni jeste. > > Podle meho nazoru neni kam spechat, nezaznamenal jsem zadny zasadni > prinos, zato par problemu, byt malych. Muzete uvest nejake palikace, > ktere na 64bitu poskytuji vyrazne/znatelne lepsi vykon ? > Sifrovaci aplikace, ufo2000, nektere bittorrenty ;-) -- Dalibor Straka P.S. U toho ufa se generuji rychleji mapy. From ppancho.villa na gmail.com Thu Dec 20 20:45:52 2007 From: ppancho.villa na gmail.com (ppancho.villa na gmail.com) Date: Thu, 20 Dec 2007 19:45:52 +0000 (UTC) Subject: instalace nvidia na debian testing References: Message-ID: ma skusenost s instalaci ovladacu z www.nvidie do lennyho z jadrem s repozitaru je taka : kernel jadro nebylo kompilovano stejnou verzi GCC kompilatoru kterou pouzivam , je potreba si nakompilovat bud vlastni jadro a nebo prekompilovat to repozitni . jinak ovladace z www.nvidie slapou uplne paradne , mam je v beta verzi a sem max spokojen From slavek.banko na axis.cz Thu Dec 20 23:24:26 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Thu, 20 Dec 2007 23:24:26 +0100 Subject: problem s apt-get In-Reply-To: <476946E8.8030508@seznam.cz> References: <476841E7.4050700@seznam.cz> <200712191152.17511.slavek.banko@axis.cz> <476946E8.8030508@seznam.cz> Message-ID: <200712202324.27185.slavek.banko@axis.cz> Debsums má evidentně potíže s perlem (respektive perl má potíže). Zkuste tedy aktualizovat perl: aptitude install perl-base Slávek -- Dne středa 19 prosinec 2007 17:29 Cramer napsal(a): > Slavek Banko napsal(a): > > Dne středa 19 prosinec 2007 11:01 Cramer napsal(a): > >> Slávek Banko napsal(a): > >>> Máte v pořádku funkční debsums? > >>> Zkuste nejdříve aptitude install debsums. > >>> > >>> Slávek > >> > >> Zdravim, > >> > >> Tak tim to bohuzel nebude :( > >> > >> > >> root na james:~# apt-get install debsums > >> Čtu seznamy balíků... Hotovo > >> Vytvářím strom závislostí... Hotovo > >> debsums je již nejnovější verze. > >> 0 aktualizováno, 0 nově instalováno, 0 k odstranění a 0 > >> neaktualizováno. > > > > A je debsums funkční? Z minulého výpisu to totiž vypadalo na problém se > > spouštěním debsums. > > root na james:~# debsums > Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match > executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at > /usr/local/share/perl/5.8.7/Errno.pm line 11. > Compilation failed in require at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > BEGIN failed--compilation aborted at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > Compilation failed in require at /usr/bin/debsums line 11. > BEGIN failed--compilation aborted at /usr/bin/debsums line 11. > > Ano, vypada to na chybu s debsums.. > Preinstalovani debsums nepomuze. > Nejaky napad, co s tim? > > c. > > > Slávek > > _______________________________________________ > > Linux mailing list > > Linux na linux.cz > > http://www.linux.cz/mailman/listinfo/linux > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From dast na panelnet.cz Sat Dec 22 13:55:52 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Sat, 22 Dec 2007 13:55:52 +0100 Subject: Postfix a spam In-Reply-To: <01d201c84264$dffece00$28010101@fortech.local> References: <20071219163557.GB18967@panelnet.cz> <01d201c84264$dffece00$28010101@fortech.local> Message-ID: <20071222125552.GA26549@panelnet.cz> Ahoj, On Wed, Dec 19, 2007 at 06:30:40PM +0100, Dalibor Toman wrote: > > potiz je v tom, ze v tom README zminuji, ze muze dojit k tomu, ze > testovani mailu trva tak dlouho, ze odesilajici ukonci spojeni driv > (nechce se mu cekat dostatecne dlouho na to az amavis a spol otestuji > zpravu a vydaji zaverecny verdikt). Jak se zachova postfix (mozna > zpravu doruci) netusim. V kazdem pripade odesilajici pak bude s tou > zpravou otravovat (zbytecne) vickrat. > > Greylisting nepouzivame - protoze dulezite zdroje mailu (freemailery > napriklad) se s tim nedokazi vyrovnat (odesilaji pokazde z jinych IP > ci jaksi vubec na opakovane odesilani kaslou). Chodi Ti spolehlive > maily od gmailu, seznamu a spol ? > Ano, chodi mi spolehlive gmail i seznam, spousta uzivatelu tam ma ucty a nejsou problemy. Jediny problem, ktery jsem zaznamenal byla podivna SMTP krabicka (to snad ani nemohl byt stroj), ktera po neuspesne pokusu o odeslani jiz pripojeni neopakovala. > > > Vykon se da dobre ladit, napriklad pro amavis tmp jsem pouzil > > ramdisk. > > btw: v tmp se nam hromadi zbytky po rozparsovani zprav amavisem > (adresar se zbytky ulozenych soucasti zpravy). Za nejakych okolnosti > po sobe amavis neuklidi (vetsinou docasna data smaze). Musime ten > adresar periodicky promazavat. Deje se to i na Tve instalaci? (nam se > to stejne chovalo i na starsim serveru s qmailem) > To je zvlastni vec! Vsude jsem o techto zbytcich cetl a daval na ne velky pozor, dokonce jsem pro jistotu udelal ramdisk nekolik stovek mega a mel pripravene pravidlo v cronu. Pouzivam debian stable, postfix a amavisd-new: Na jednom nezatizenem stroji mi nezustavaji vubec _zadne_ zbytky a na jinem s vekym trafikem mam za pul roku tri. # ls -al /var/lib/amavis/tmp/ amavis 2007-10-09 00:51 amavis-20071009T005130-05703 amavis 2007-10-09 00:51 amavis-20071009T005150-05704 amavis 2007-10-09 00:59 amavis-20071009T005922-05704 amavis 2007-12-17 13:58 amavis-20071217T133647-15388 amavis 2007-12-22 13:10 amavis-20071222T131048-01083 amavis 2007-12-22 13:25 amavis-20071222T132502-02122 -- Dalibor Straka From peak na argo.troja.mff.cuni.cz Sat Dec 22 15:50:37 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Sat, 22 Dec 2007 15:50:37 +0100 (CET) Subject: Problem s instalaciou certifikatu In-Reply-To: <47697BCD.9090804@grafon.sk> Message-ID: <20071222154124.841.0@paddy.troja.mff.cuni.cz> On Wed, 19 Dec 2007, Vladimir Rengevic wrote: > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA > certificate (BasicConstraints: CA == TRUE !?) > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN) > `www.grafon.sk' does NOT match server name!? Ten serverový certifikát s CA=TRUE bych chtěl fakt vidět. Co píše openssl x509 -text -in server.crt? --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From cramers na seznam.cz Sat Dec 22 17:58:18 2007 From: cramers na seznam.cz (Cramer) Date: Sat, 22 Dec 2007 17:58:18 +0100 Subject: problem s apt-get In-Reply-To: <200712202324.27185.slavek.banko@axis.cz> References: <476841E7.4050700@seznam.cz> <200712191152.17511.slavek.banko@axis.cz> <476946E8.8030508@seznam.cz> <200712202324.27185.slavek.banko@axis.cz> Message-ID: <476D422A.2050700@seznam.cz> To bych rad, bohuzel to je prave to, co mi nejde.. root na james:~# aptitude install perl-base Čtu seznamy balíků... Hotovo Vytvářím strom závislostí... Hotovo Reading extended state information Initializing package states... Hotovo Building tag database... Hotovo No packages will be installed, upgraded, or removed. 0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 0B of archives. After unpacking 0B will be used. Writing extended state information... Hotovo Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at /usr/local/share/perl/5.8.7/Errno.pm line 11. Compilation failed in require at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. BEGIN failed--compilation aborted at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. Compilation failed in require at /usr/bin/debsums line 11. BEGIN failed--compilation aborted at /usr/bin/debsums line 11. E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; fi' E: Sub-process returned an error code A package failed to install. Trying to recover: root na james:~# > Debsums má evidentně potíže s perlem (respektive perl má potíže). Zkuste tedy > aktualizovat perl: > > aptitude install perl-base > > Slávek > From slavek.banko na axis.cz Sun Dec 23 00:06:28 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Sun, 23 Dec 2007 00:06:28 +0100 Subject: problem s apt-get In-Reply-To: <476D422A.2050700@seznam.cz> References: <476841E7.4050700@seznam.cz> <200712202324.27185.slavek.banko@axis.cz> <476D422A.2050700@seznam.cz> Message-ID: <200712230006.29680.slavek.banko@axis.cz> Zkuste buď reinstall balíčku: aptitude reinstall perl-base A pokud ani to neprojde, tak jej zkuste ručně vypalit: dpkg --unpack /var/cache/apt/archives/perl-base* Uvidíme, zda se konečně někam posuneme. Slávek -- Dne sobota 22 prosinec 2007 17:58 Cramer napsal(a): > To bych rad, bohuzel to je prave to, co mi nejde.. > > root na james:~# aptitude install perl-base > Čtu seznamy balíků... Hotovo > Vytvářím strom závislostí... Hotovo > Reading extended state information > Initializing package states... Hotovo > Building tag database... Hotovo > No packages will be installed, upgraded, or removed. > 0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded. > Need to get 0B of archives. After unpacking 0B will be used. > Writing extended state information... Hotovo > Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match > executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at > /usr/local/share/perl/5.8.7/Errno.pm line 11. > Compilation failed in require at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > BEGIN failed--compilation aborted at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > Compilation failed in require at /usr/bin/debsums line 11. > BEGIN failed--compilation aborted at /usr/bin/debsums line 11. > E: Problem executing scripts DPkg::Post-Invoke 'if [ -x > /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp > /var/cache/apt/archives; fi' E: Sub-process returned an error code > A package failed to install. Trying to recover: > root na james:~# > From dast na panelnet.cz Sun Dec 23 15:31:54 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Sun, 23 Dec 2007 15:31:54 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA Message-ID: <20071223143153.GA9563@panelnet.cz> Ahoj, mam vanocni problemek: Na spouste serveru jedne firmy mam ruzne sluzby, pro ktere jsme casem generoval certifikaty (ssl weby, smtps, openvpn a dalsi). Kazdy s jinymi parametry. Premyslel jsem, ze sjednotim vsechny certifikaty, vytvorim si vlastni CA a vytvorim nejaky skript nebo papir pro generovani novych certifikatu. Jde to takhle jednoduse vse sjednotit pod jednu strechu? Precetl jsem par howto, ktere se vzdy tykalo konkretni sluzby. Nevite o nejakem obecnem povidani a hlavne prikladu reseni modelove situace sjednocovani certifikatu? Diky, -- Dalibor Straka From cramers na seznam.cz Sun Dec 23 16:09:39 2007 From: cramers na seznam.cz (Cramer) Date: Sun, 23 Dec 2007 16:09:39 +0100 Subject: problem s apt-get In-Reply-To: <200712230006.29680.slavek.banko@axis.cz> References: <476841E7.4050700@seznam.cz> <200712202324.27185.slavek.banko@axis.cz> <476D422A.2050700@seznam.cz> <200712230006.29680.slavek.banko@axis.cz> Message-ID: <476E7A33.9020800@seznam.cz> Tak se obavam, ze ani to nepomohlo root na james:~# aptitude reinstall perl-base Čtu seznamy balíků... Hotovo Vytvářím strom závislostí... Hotovo Reading extended state information Initializing package states... Hotovo Building tag database... Hotovo The following packages will be REINSTALLED: perl-base 0 packages upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 0 not upgraded. Need to get 0B/738kB of archives. After unpacking 0B will be used. Writing extended state information... Hotovo (Čtu databázi ... nyní je nainstalováno 52687 souborů a adresářů.) Připravuji nahrazení perl-base 5.8.7-10ubuntu1.1 (pomocí .../perl-base_5.8.7-10ubuntu1.1_i386.deb) ... Rozbaluji náhradu perl-base ... Nastavuji balík perl-base (5.8.7-10ubuntu1.1) ... Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at /usr/local/share/perl/5.8.7/Errno.pm line 11. Compilation failed in require at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. BEGIN failed--compilation aborted at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. Compilation failed in require at /usr/bin/debsums line 11. BEGIN failed--compilation aborted at /usr/bin/debsums line 11. E: Problem executing scripts DPkg::Post-Invoke 'if [ -x /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; fi' E: Sub-process returned an error code A package failed to install. Trying to recover: root na james:~# dpkg --unpack /var/cache/apt/archives/perl-base* (Čtu databázi ... nyní je nainstalováno 52687 souborů a adresářů.) Připravuji nahrazení perl-base 5.8.7-10ubuntu1.1 (pomocí .../perl-base_5.8.7-10ubuntu1.1_i386.deb) ... Rozbaluji náhradu perl-base ... root na james:~# debsums Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at /usr/local/share/perl/5.8.7/Errno.pm line 11. Compilation failed in require at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. BEGIN failed--compilation aborted at /usr/local/share/perl/5.8.7/File/Temp.pm line 144. Compilation failed in require at /usr/bin/debsums line 11. BEGIN failed--compilation aborted at /usr/bin/debsums line 11. Takze zas nic :( > Zkuste buď reinstall balíčku: > aptitude reinstall perl-base > > A pokud ani to neprojde, tak jej zkuste ručně vypalit: > dpkg --unpack /var/cache/apt/archives/perl-base* > > Uvidíme, zda se konečně někam posuneme. > > Slávek > From Dan na feld.cvut.cz Mon Dec 24 02:00:46 2007 From: Dan na feld.cvut.cz (Dan Ohnesorg) Date: Mon, 24 Dec 2007 02:00:46 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071223143153.GA9563@panelnet.cz> References: <20071223143153.GA9563@panelnet.cz> Message-ID: <20071224010046.GH14427@feld.cvut.cz> Dne Sun, Dec 23, 2007 at 03:31:54PM +0100, Dalibor Straka napsal: > Ahoj, > > mam vanocni problemek: Na spouste serveru jedne firmy mam ruzne sluzby, > pro ktere jsme casem generoval certifikaty (ssl weby, smtps, openvpn > a dalsi). Kazdy s jinymi parametry. Premyslel jsem, ze sjednotim vsechny > certifikaty, vytvorim si vlastni CA a vytvorim nejaky skript nebo papir > pro generovani novych certifikatu. Jde to takhle jednoduse vse sjednotit > pod jednu strechu? Precetl jsem par howto, ktere se vzdy tykalo > konkretni sluzby. Nevite o nejakem obecnem povidani a hlavne prikladu > reseni modelove situace sjednocovani certifikatu? to chce zagooglit a najit si scripty pro nejakou vlastni CA. A nebo napr. vyuzit sluzeb www.cacert.org. Z free veci se da pouzit tinyCA nebo OpenCA. zdravim dan From dast na panelnet.cz Mon Dec 24 02:43:03 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Mon, 24 Dec 2007 02:43:03 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071224010046.GH14427@feld.cvut.cz> References: <20071223143153.GA9563@panelnet.cz> <20071224010046.GH14427@feld.cvut.cz> Message-ID: <20071224014303.GA13971@panelnet.cz> On Mon, Dec 24, 2007 at 02:00:46AM +0100, Dan Ohnesorg wrote: > Dne Sun, Dec 23, 2007 at 03:31:54PM +0100, Dalibor Straka napsal: > > Ahoj, > > > > mam vanocni problemek: Na spouste serveru jedne firmy mam ruzne sluzby, > > pro ktere jsme casem generoval certifikaty (ssl weby, smtps, openvpn > > a dalsi). Kazdy s jinymi parametry. Premyslel jsem, ze sjednotim vsechny > > certifikaty, vytvorim si vlastni CA a vytvorim nejaky skript nebo papir > > pro generovani novych certifikatu. Jde to takhle jednoduse vse sjednotit > > pod jednu strechu? Precetl jsem par howto, ktere se vzdy tykalo > > konkretni sluzby. Nevite o nejakem obecnem povidani a hlavne prikladu > > reseni modelove situace sjednocovani certifikatu? > > to chce zagooglit a najit si scripty pro nejakou vlastni CA. A nebo napr. > vyuzit sluzeb www.cacert.org. > Ahoj, ja jsem nasel a pouzil z openvpn.org. Jenom hledam lepsi metody a nejaky hlubsi pojednani. Pac ted to mam vsechno "kazdy pes jina ves". Napriklad by se mi libilo generovat si klice na jednotlivych strojich, pak vygenerovat zadost o podpis, tu poslat nejakemu serveru, ten ji podepise, ale aby k tomu nepotreboval ca.key, ale jen nejaky master-server-podepisovaci-certifikat. Proste si udelat skutecne _velky_ poradek. -- Dalibor Straka From Dan na feld.cvut.cz Mon Dec 24 01:55:06 2007 From: Dan na feld.cvut.cz (Dan Ohnesorg) Date: Mon, 24 Dec 2007 01:55:06 +0100 Subject: Problem s instalaciou certifikatu In-Reply-To: <20071222154124.841.0@paddy.troja.mff.cuni.cz> References: <47697BCD.9090804@grafon.sk> <20071222154124.841.0@paddy.troja.mff.cuni.cz> Message-ID: <20071224005506.GG14427@feld.cvut.cz> Dne Sat, Dec 22, 2007 at 03:50:37PM +0100, Pavel Kankovsky napsal: > On Wed, 19 Dec 2007, Vladimir Rengevic wrote: > > > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA > > certificate (BasicConstraints: CA == TRUE !?) > > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN) > > `www.grafon.sk' does NOT match server name!? > > Ten serverový certifikát s CA=TRUE bych chtěl fakt vidět. > Co píše openssl x509 -text -in server.crt? Myslim ze vec je celkem jasna, CA dava na diskete svuj certifikat a certifikat pro server. Tazatel omylem instaloval misto sveho certifikatu certifikat CA. Spravne je to nejak takle: SSLCertificateFile /etc/../vydany_certifikat.pem SSLCertificateKeyFile /etc/.../muj_privatni_klic.pem SSLCACertificateFile /etc/.../certifikatCA.pem pricemz v tom souboru certifikatCA.pem bude jednak korenovy certifikat a jednak asi alespon jeste jeden certifikat, protoze mam pocit ze DTCA nepodepisuje primo svym korenovym certifikatem. Aniz bych chtel nejak pomlouvat konkurencni DTCA, porizovat u nich certifikat pro server neni moudre. Zatim nejsou v zadnem prohlizeci zahrnuti jako duveryhodni, takze z pohledu klienta je to uplne stejne jako kdyby byl certifikat podepsan nejakou vlastni CA, tedy server se zobrazuje jako neduveryhodny. Navic certifikat pro jejich vlastni www stranky vyprsel 24.8.2007, coz take neco napovida. zdravim dan From Vaclav.Dusek na upce.cz Mon Dec 24 07:31:03 2007 From: Vaclav.Dusek na upce.cz (Vaclav Dusek) Date: Mon, 24 Dec 2007 07:31:03 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071224014303.GA13971@panelnet.cz> References: <20071223143153.GA9563@panelnet.cz> <20071224010046.GH14427@feld.cvut.cz> <20071224014303.GA13971@panelnet.cz> Message-ID: <476F5227.6000706@upce.cz> Toto by nestacilo? http://www.root.cz/clanky/jak-na-openssl/ Dne 24.12.2007 02:43, Dalibor Straka napsal(a): > On Mon, Dec 24, 2007 at 02:00:46AM +0100, Dan Ohnesorg wrote: >> Dne Sun, Dec 23, 2007 at 03:31:54PM +0100, Dalibor Straka napsal: >>> Ahoj, >>> >>> mam vanocni problemek: Na spouste serveru jedne firmy mam ruzne sluzby, >>> pro ktere jsme casem generoval certifikaty (ssl weby, smtps, openvpn >>> a dalsi). Kazdy s jinymi parametry. Premyslel jsem, ze sjednotim vsechny >>> certifikaty, vytvorim si vlastni CA a vytvorim nejaky skript nebo papir >>> pro generovani novych certifikatu. Jde to takhle jednoduse vse sjednotit >>> pod jednu strechu? Precetl jsem par howto, ktere se vzdy tykalo >>> konkretni sluzby. Nevite o nejakem obecnem povidani a hlavne prikladu >>> reseni modelove situace sjednocovani certifikatu? >> to chce zagooglit a najit si scripty pro nejakou vlastni CA. A nebo napr. >> vyuzit sluzeb www.cacert.org. >> > Ahoj, > > ja jsem nasel a pouzil z openvpn.org. Jenom hledam lepsi metody a nejaky > hlubsi pojednani. Pac ted to mam vsechno "kazdy pes jina ves". Napriklad > by se mi libilo generovat si klice na jednotlivych strojich, pak > vygenerovat zadost o podpis, tu poslat nejakemu serveru, ten ji > podepise, ale aby k tomu nepotreboval ca.key, ale jen nejaky > master-server-podepisovaci-certifikat. Proste si udelat skutecne _velky_ > poradek. From psimek na jcu.cz Mon Dec 24 09:54:09 2007 From: psimek na jcu.cz (Petr Simek) Date: Mon, 24 Dec 2007 09:54:09 +0100 (Central Europe Standard Time) Subject: Problem s instalaciou certifikatu In-Reply-To: <20071224005506.GG14427@feld.cvut.cz> Message-ID: On Mon, 24 Dec 2007, Dan Ohnesorg wrote: > Dne Sat, Dec 22, 2007 at 03:50:37PM +0100, Pavel Kankovsky napsal: > > On Wed, 19 Dec 2007, Vladimir Rengevic wrote: > > > > > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate is a CA > > > certificate (BasicConstraints: CA == TRUE !?) > > > [Wed Dec 19 21:03:51 2007] [warn] RSA server certificate CommonName (CN) > > > `www.grafon.sk' does NOT match server name!? > > > > Ten serverový certifikát s CA=TRUE bych chtěl fakt vidět. > > Co píše openssl x509 -text -in server.crt? > > Myslim ze vec je celkem jasna, CA dava na diskete svuj certifikat a > certifikat pro server. Tazatel omylem instaloval misto sveho certifikatu > certifikat CA. > > Spravne je to nejak takle: > > SSLCertificateFile /etc/../vydany_certifikat.pem > SSLCertificateKeyFile /etc/.../muj_privatni_klic.pem > SSLCACertificateFile /etc/.../certifikatCA.pem Spravne je to spis takhle : SSLCertificateFile /etc/httpd/conf/certifikat/server_cert.pem SSLCertificateKeyFile /etc/httpd/conf/certifikat/server_priv_key_nopw.pem SSLCertificateChainFile /etc/httpd/conf/certifikat/authority_public_ca_cert.pem to SSLCACertificateFile je kdyz chcete validovat klienty . > dan *------------------------------------------------------------------------* | Petr Simek APS JU | | psimek na jcu.cz | *------------------------------------------------------------------------* From psimek na jcu.cz Mon Dec 24 09:58:31 2007 From: psimek na jcu.cz (Petr Simek) Date: Mon, 24 Dec 2007 09:58:31 +0100 (Central Europe Standard Time) Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071224014303.GA13971@panelnet.cz> Message-ID: On Mon, 24 Dec 2007, Dalibor Straka wrote: > ja jsem nasel a pouzil z openvpn.org. Jenom hledam lepsi metody a nejaky > hlubsi pojednani. Pac ted to mam vsechno "kazdy pes jina ves". Napriklad > by se mi libilo generovat si klice na jednotlivych strojich, pak > vygenerovat zadost o podpis, tu poslat nejakemu serveru, ten ji > podepise, ale aby k tomu nepotreboval ca.key, ale jen nejaky > master-server-podepisovaci-certifikat. Proste si udelat skutecne _velky_ > poradek. Rekl bych ze kdyz si vygenerujete vlastni CA pomoci openssl tak ten priv key a certifikat te Vasi CA mit budete a tim pak podepisujete ty zadosti. Takze to takhle klidne muzete mit, ne ? A pokud ten certifikat vlastni CA naimportuje do vsech Vasich prohlizecu a aplikaci, tak to bude i relativne duveryhodne. > -- Dalibor Straka *------------------------------------------------------------------------* | Petr Simek APS JU | | psimek na jcu.cz | *------------------------------------------------------------------------* From Jan na houstek.net Mon Dec 24 13:10:35 2007 From: Jan na houstek.net (Jan Houstek) Date: Mon, 24 Dec 2007 13:10:35 +0100 (CET) Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071223143153.GA9563@panelnet.cz> References: <20071223143153.GA9563@panelnet.cz> Message-ID: On Sun, 23 Dec 2007, Dalibor Straka wrote: > Ahoj, > > mam vanocni problemek: Na spouste serveru jedne firmy mam ruzne sluzby, > pro ktere jsme casem generoval certifikaty (ssl weby, smtps, openvpn a > dalsi). Kazdy s jinymi parametry. Premyslel jsem, ze sjednotim vsechny > certifikaty, vytvorim si vlastni CA a vytvorim nejaky skript nebo papir > pro generovani novych certifikatu. [...] A nebylo by vhodnejsi si ty certifikaty nechat vystavit u CAcert? Tedy ty, kterymi se prezentuje server, na uzivatelske certifikaty pro openvpn bude asi privatni CA lepsi. http://www.cacert.org -- HH From totojepast na razdva.cz Tue Dec 25 16:27:20 2007 From: totojepast na razdva.cz (totojepast) Date: Tue, 25 Dec 2007 16:27:20 +0100 Subject: OT: Prosba o spolupraci pri testu nolistingu Message-ID: <36498$4771217f$3e184689$11208@news.chello.cz> Testuji ted na jedne domene nolisting, coz je jedna z metod boje proti spamu pomoci kouzla s MX zaznamy v DNS (vice info na http://nolisting.org/, http://en.wikipedia.org/wiki/Nolisting, http://www.abclinuxu.cz/zpravicky/nolisting-dalsi-technika-boje-proti-spamu) Potrebuji ale overit, zda nolisting neohrozuje dorucovani legitimnich zprav. Ruzne "divne" postovni servery (stare verze Novell GroupWise, exoticke webmaily apod.) mely problemy s greylistingem, chtel bych proto poprosit o nasledujici: Mohli byste poslat prazdnou testovai zpravu zaroven na tyto 2 adresy? Na jedne z nich je nolisting implementovan, na druhe nikoli: xxx na koukat.cz, xxx na ehelp.cz From stepan na srnet.cz Tue Dec 25 19:50:43 2007 From: stepan na srnet.cz (Stepan Roh) Date: Tue, 25 Dec 2007 19:50:43 +0100 (CET) Subject: Linux live distribuce na USB s rychlym startem Message-ID: Zdravim. Shanim v tento svatecni cas nejakou "zivou" distribuci Linuxu na USB, ktera dokaze co nejrychleji nastartovat. Zkusil jsem uz kde co, ale stale tomu neco chybi. V podstate jedine, co od toho cekam je, ze si to pres DHCP vyzada adresu, nahodi Xy a v nich prohlizec a to je vsechno. Je mi jasne, ze si to mohu vytvorit sam, ale rad bych neco existujiciho. Diky predem za rady. S pozdravem, Stepan Roh From spm na hellmachine.klfree.net Tue Dec 25 20:21:14 2007 From: spm na hellmachine.klfree.net (Jan Krajdl) Date: Tue, 25 Dec 2007 20:21:14 +0100 Subject: Linux live distribuce na USB s rychlym startem In-Reply-To: References: Message-ID: <1198610474.7088.1.camel@localhost> On Tue, 2007-12-25 at 19:50 +0100, Stepan Roh wrote: > Zdravim. > > Shanim v tento svatecni cas nejakou "zivou" distribuci Linuxu na USB, > ktera dokaze co nejrychleji nastartovat. Zkusil jsem uz kde co, ale stale > tomu neco chybi. V podstate jedine, co od toho cekam je, ze si to pres > DHCP vyzada adresu, nahodi Xy a v nich prohlizec a to je vsechno. Je mi > jasne, ze si to mohu vytvorit sam, ale rad bych neco existujiciho. Diky > predem za rady. Já jsem na flashku narval plnej archlinux :) Sice to neni uplně live, ale zase jsem tam mohl nacpat, co jsem chtěl... pro malé mučení flashky potom možno nechat vytvořit ramdisk, do něj /var a / nechat jako ro... jinak z těch live jsem zkoušel třeba phlak linux - ten je na instalaci jednoduchý a mělo by to splňovat to, co si přeješ.. From stoupa na practisoft.cz Wed Dec 26 01:21:56 2007 From: stoupa na practisoft.cz (Petr Vileta) Date: Wed, 26 Dec 2007 01:21:56 +0100 Subject: Prosba o spolupraci pri testu nolistingu References: <36498$4771217f$3e184689$11208@news.chello.cz> Message-ID: totojepast wrote: > Testuji ted na jedne domene nolisting, coz je jedna z metod boje proti > spamu pomoci kouzla s MX zaznamy v DNS (vice info na > http://nolisting.org/, http://en.wikipedia.org/wiki/Nolisting, > http://www.abclinuxu.cz/zpravicky/nolisting-dalsi-technika-boje-proti-spamu) > > Potrebuji ale overit, zda nolisting neohrozuje dorucovani legitimnich > zprav. Ruzne "divne" postovni servery (stare verze Novell GroupWise, > exoticke webmaily apod.) mely problemy s greylistingem, chtel bych > proto poprosit o nasledujici: > > Mohli byste poslat prazdnou testovai zpravu zaroven na tyto 2 adresy? > Na jedne z nich je nolisting implementovan, na druhe nikoli: > > xxx na koukat.cz, xxx na ehelp.cz Tak jsem si to cetl a nejak se mi ten system vubec nelibi. Pisou tam, ze pokud prisel mail ze sekundarniho MX a pritom primarni je dostupny, tak ze to je spam. Nejsem zadny guru, ale co jsem tak mluvil s lidmi okolo mail serveru, tak pokud vypadne primarni MX, jeho praci prevezme sekundarni, ovsem ten pracuje podle nejakeho RFC o hodne pomaleji. No a kdyz ten hlavni naskoci, tak ten sekundarni porad jeste dorucuje zpravy co se mu mezi tim nashromazdily. Tedy slysel jsem to, ze misto aby to poslal tomu primarnimu, tak to dorucuje sam. Udajne to tak nekdo ma nastavene. No a hodne lidi nema sekundarni MX vubec. Treba zrovna ja. -- Petr Skype: callto://fidokomik Na mail uvedeny v headeru zpravy nema cenu nic posilat, konci to v PR* :-) Odpovidejte na petr na practisoft cz From fimivivi na yahoo.com Wed Dec 26 09:33:40 2007 From: fimivivi na yahoo.com (fimivivi na yahoo.com) Date: 26 Dec 2007 08:33:40 GMT Subject: M I-5, Perse cution Com paring the M I5 Persecutio n w ith Germ an Fina l Solu tion Message-ID: MI5 Persecution Update:. Friday 16 April, 1999 If You Intend To. Reply, Please Read This Please.... keep your response to one page!. Faxes over a page or. two will be deleted without being. read. BBC newscaster Nicholas Witchell cant. stop himself laughing During 1990-91 there were very many. instances of "interactive television" where newscasters and other. TV presenters saw on a screen before them what was happening. in my home, and reacted, frequently by laughing at. me. During this period I unfortunately did not record these programmes. For. the last year or two, I have been recording everything I watch, and there has been. a drastic decrease in such incidents. However, on occasion, television presenters do still engage. in "interactive watching" and react to what they see. This has been. evident with Jon Snow of Channel Four. News recently - a particularly interesting case, since it has been established that. he cannot be corrupted by money (it is well-documented that MI5. offered him a tax-free salary and he turned them down). I wonder what. device MI5 are using to encourage him to do. the "interactive watching"? On Saturday 10 April 1999 at 7pm, Nicholas Witchell on BBC2. News reacted when he saw that I was watching the programme, and I have. his reactions stored safely on videotape. I. have watched this tape several times and I am entirely confident that my evaluation of his. reactions is correct. For several. minutes his upper lip quivered in mirth as he attempted to keep a straight face.. Then finally his self-control evaporated through the excuse of a weak joke and. his face collapsed into a grin. The strange thing is that I dont know why he was laughing at. me, what I had done recently to "deserve" to be laughed at. The MI5. persecutors usually manage to. invent some justification as to why people should laugh at and/or abuse me ("hes an X", "it was. so funny" etc), so Mr Witchell could have. been laughing for any number of reasons. Perhaps he found the views I have been expressing in these. articles amusing? I suppose if youre paid enough money and ordered to laugh then even the most innocuous. thing becomes. funny. Jon Snow of Channel Four News. cant stop himself smirking, either. On 12 February 1999 I was watching. Channel Four News presented by Jon Snow.. As usual, I was recording the programme, so that if anything out of the. ordinary happened, Id be able to go back and watch it again. Now, Jon. Snow, by his own claim, is uncorruptible. He says he turned down an. offer of a substantial tax-free salary from MI5 - they wanted to make him their mouthpiece, and he told them where to get. off. So you will be. most surprised to learn that Jon Snow "interactively watched" me that. evening, and on many other evenings. Approximately fifteen minutes into the programme,. he announced that the US President would be making a live appearance at. about 7.30pm; I looked at the clock on the mantelpiece; and Snow. saw me looking at the clock, and visibly tried to. suppress a smirk. Uncorruptible, are you,. Mister Snow? If not money, then why are you watching me, Mister Snow? Are they forcing you to watch me? Cant. you turn the. monitor off, Mister Snow? Keith Hill MP (Labour - Streatham), my elected representative, as. ever refuses. to help. Comparing the. MI5 Persecution with German "Final Solution" It. might seem offensive to compare the mass murder of millions of civilians in wartime with the peacetime persecution. of merely one person. Yet the comparison has been. coursing through my mind for several years now, because the brutality of German intent to "sub-humans". is very much comparable to the brutality of British. intent to someone they vituperate and term "not up to British standards". The methods may. differ, but. the persecutors mindset is the same. The Germans first targeted the mentally. disabled, too During WW2 millions. of ethnic Russians, Poles, Jews, mentally ill, gypsies and other minorities were rounded up. and murdered in purpose-built camps by the German. regime, in the name of "racial superiority". Fifty years on, the British Secret Police,. MI5, instituted a campaign of mass hysteria; but in their cowardice, limited their. activities to one single victim. It is instructive to. note that the early German "cleansing" effort was directed primarily. not at Jews, but at the mentally ill. The Nazis set up the T4 project. in the thirties to "cleanse" away 70,000 mentally disabled people,. including schizophrenics and epileptics. After WW2 the Jews with their. media influence used the reaction from the holocaust to roll back anti-semitism in the Western countries; however, the mentally. ill are today still a persecuted. group in the modern Western world as they were under the Nazis (the current. Jewish home secretary in the UK intends to bring in laws for incarceration without any criminal charge for. some mentally ill people - he protects his own minority, but does. nothing for the. other minorities in todays society), and this continuing bias forms a central cause for the current acts of persecution in. the UK. Widespread knowledge of what is. happening to the "un-British" minority In both the. German persecution of the thirties and early forties, and the current British persecution, many,. many people are well aware of whats happening.. There is widespread complicity through inaction of populace; and in a substantial proportion of. the mainstread population, the persecution had/has widespread enthusiastic. support; yet in both the German case in the. 1940s and the British today, the existence of persecution is a mass secret which must be never admitted out loud. In. the recent Lawrence case this "secret bigotry". has been termed "institutionalised racism", and that is a very good. word for what the British. are doing today The persecutory attitudes and omerta regarding them are so deeply ingrained. in the national psyche that they define the national. mood During WW2 many Germans knew minorities were. disappearing, and through inaction quietly condoned their government's. mass murder of "un-German" minorities and inferior "foreigners";. and in the 1990s, similarly, many. English people know what the MI5 British Secret Police have been doing, and not only condone. it, but actively take part, because of. xenophobia against the "un-British" unit minority that is the target of "British" actions. This attitude by the British. persecutors has been made explicit. through the words "he's not up to British standards"; the British seem to have. found their very own "untermenschen" to victimise. Why these obsessive "holy wars". happen This type of aggression occurs. when the majority is threatened or humiliated in some way,. economically, militarily or culturally. In pre-WW2 Germany the threat. was primarily economic and military, following Germany's humiliating. defeat in the first world war and the reparations it was. forced to pay. In modern Britain, one might guess that the majority English who are behind. the persecution feel pressured by the swiftly diminishing. status of Britain in the world, and the rapidly increasing coloured colonisation of their country, which in time will see. the ethnic English a minority in their own land,. and their more antisocial elements, unable to reply to the obvious. threat, instead project their aggression onto another, weaker,. unit minority In. both cases there is a whiff of "holy war" or irrational obsession with the. persecution. Certainly the German behaviour fifty years ago bordered on the not-quite-sane, and the current British. behaviour towards their chosen victim is strongly tinged with. a leave-taking of reason. And the choices open to the. victims are the same, since MI5 will never allow me to escape them, "if he tries. to run away we'll find him", just like the commandant of Auschwitz telling the new. arrivals, "the only escape is through. the chimney". The Victim Will Destroy Us if We Dont. Destroy Him First The persecutors propaganda is the. same. Fifty years ago the Germans said, "if we don't do it. to the Jews then the Jews will do it to us"; and MI5's propaganda in the early nineties. concentrated on their victim as a "monster". aesome "untermenschen" minority. "We are. decent fellows" say the Brutal Persecutors During the course of researching this. article I read part of the very interesting. book, "Hitler - A Study in Tyranny", by Alan Bullock. This volume contains a. quote from Himmler on the "Final Solution"; "Most of you know what it means when a hundred corpses are lying. side by side, or. five hundred or one thousand. To have stuck it out, and at the same time .... to have remained decent fellows, that is what has made. us hard. This is a page of glory in our history which has never been. written and is never to be. written." In the. MI5 persecution, too, there is a thread of deliberate brutality to the sick and vulnerable, while the persecutors maintain that. "we are decent fellows". There is. almost a conscious schizophrenia in the self-attitudes. of the Security Service operatives and those in the public who they employ against me, which reflects the. contradiction evident in the German attitude above. On the one hand,. they stoop to the lowest and most base behaviour; yet at the same time, the MI5. operatives tell themselves that since they are civilised British. people, then surely they must by definition be "decent fellows".. Any indecency is made the fault of the victim; "hes. making us persecute him, so we need feel no guilt". Yet the conduct is atypical of the way these peoples see their. normal modes. of behaviour. Befslaughter was not typical of normal German behaviour up to. that point. Similarly, the current MI5 abuse goes against the. grain of British self-image as being "reserved" and "decent", since they are using terms of abuse which are common among blacks and. other supposedly less-developed races, but not among. the English. Conclusion The ultimate aim of both persecutions is the. humiliation and physical extinction of the persecuted group. The Germans. did this in a very direct way; the British Secret Police MI5 are acting indirectly and. relying on self-extinction of their target, because. in peacetime and in the current somewhat false climate of "political correctness" more. direct methods are impossible. If MI5 undertook more direct action the mass "omerta". would be broken. I have written this article with. sincerity to show how a historically recent persecution in another country parallels what is being done in. this country today.. In both cases, the evil-doers are of their countries establishments, and rely on widespread tacit support to. maintain the persecution and omerta around it. While the holocaust. was undoubtedly the greater evil, it is important to be aware of. the fact that had the Germans not been. defeated fifty years ago, their plans would have gone through to total completion. In Britain today. no force threatens the "permanent government" of which the Security Service forms a part; and it looks. very unlikely. that the wrongs perpetrated by the MI5 secret police will ever be revealed to public view, and. the British secret state brought to justice for its evil. actions. 502 From imfef na yahoo.com Wed Dec 26 09:45:35 2007 From: imfef na yahoo.com (imfef na yahoo.com) Date: 26 Dec 2007 08:45:35 GMT Subject: M'I`5'Per secution MI5 Wast e T axpayer Mi llions on Po intless Hate-Campaig n Message-ID: MI5. Persecution Update: Friday 30 April, 1999 If You Intend To Reply,. Please Read This Please.... keep your response to one page!. Faxes over a page. or two will be deleted without being. read. Somewhere. between 0 and 100% The last few days. there have been no clear recordable instances of abuse. However, while travelling. on the Underground, while walking around near my home and going to friends homes, I am constantly troubled. by thoughts that those people over there might be about to. get at me; that the couple sitting in the opposite seats laughing are in. fact laughing at me; et cetera,. et cetera. A comment by a scientist to the. BSE inquiry sticks in my mind. He described the possible scale of the epidemic as "between. 0% and 100%". It might not be happening, it might not happen at all,. to any discernable degree.... or it might be. total. Without clear recording, which seems to have become impossible the. last couple of weeks, there is no way of knowing whether the. harassment really is continuing, whether we have entered a. temporary hiatus, or whether perhaps it has perhaps stopped for now. But for the time being I think there arent any. reasons to dicontinue these faxes. I only re-started them six weeks ago in. response to a resumption of MI5 harassment; and I think I will need to be more convinced of. absence of persecution before I discontinue. my complaints. The Newscasters are. still watching In the last few weeks there. have been at least a couple of fairly overt instances of "interactive watching" by newscasters. I. reported this in a previous "MI5 Persecution. Update". These instances are really very rare compared to 1990-91,. when there were many dozens of such occurrences. Undoubtedly. the reduction is due to my practice. of videotaping everything I see. Recently I had the opportunity of showing this years "happenings" (Jon Snow/Nicholas Witchell). to my psychiatrist, and he. agreed that in both cases the newscasters were expressing. merriment without visible cause, and that objectively it might be. possible for my claims to be true - although of course other people reported similar thoughts to him,. and this thinking is usually a symptom of. illness. Read About. the MI5 Persecution on the World Wide Web The March. 1998 issue (number 42) of .net Magazine reviews the website describing it. as an "excellent site". Since August 11, 1996 over 50,000 people have browsed. this website. You are encouraged to read the web pages. which include a FAQ (frequently asked questions). section outlining the nature of the persecutors, their methods of harassment through the media,. people at work and among the. general public an evidence section, which carries audio and. video clips of media and workplace harassment, rated according to how directly I think. they refer to me objective descriptions of the state. security agencies involved scanned texts of the complaints I have. made to media and state security agencies. involved posts which have been made to netnews over the last four years on. this topic Keith Hill. MP (Labour - Streatham), my elected representative, as ever refuses. to help. MI5 Waste Taxpayer Millions. on Pointless Hate-Campaign Recently I was talking to an independent observer about the nature. and purpose of the perceived campaign. of persecution against me. The person I spoke to, a highly intelligent man, said he was struck by. the utter pointlessness. of the perceived campaign against me. He also said that, if my theories were in fact true, many people would have. to be involved, in the surveillance itself, and in the technical side of the delivery. of information from my home to. TV studios for example, if the "interactive watching" were happening as described. He voiced. these thoughts without any. prompting from me; but both I and other observers had arrived at pretty much the same conclusions, some. years ago. I saw. a team of four men at Toronto Airport in 1993 To carry out the surveillance. alone, full-time, would employ four or five men,. or their equivalent in terms of man-hours. Each man would "work" an eight-hour shift, so you would need at least three men doing. the surveillance, plus a connecting link / manager.. An indicator that this estimate is correct arrived in 1993, when I was accosted by one. of a group of four men at Toronto. Airport; he said, laughing, "if he tries to run away well find him". Plainly these were the men who had been involved. in the intrusive surveillance of me. for the preceding three years. On other occasions, I have seen the same. man on two or three occasions. On one. such occasion, at Ottawas Civic Hospital in November 1996; he gave his name to the doctor as "Alan Holdsworth" or some such;. my hearing is not very good sometimes and I am not sure of the surname, although I. am sure "Alan" was his first name. I saw exactly the same. man again in Ottawa, at the airport, in July 1998. Obviously, other people must be. "working" with this person; he would not be the sole agent employed. in this case. Usenet readers views on the Cost to. MI5 of Running the Campaign Here's what a couple of other people on internet newsgroups /. Usenet (uk.misc). had to say regarding the cost of running such an operation... PO: >Have some sense, grow. up and smell reality. What you are talking about PO: >would take loads of. planning, tens of thousands of pounds and lots of PO: >people involved in. the planning, execution and maintenance of it. You PO: >must have a very high opinion of yourself to think. you are worth it. and...... PM: >But why? And why you? Do you realize how. much it would cost to keep PM: >one person under continuous. surveillance for five years? Think about PM: >all the man/hours. Say they _just_ allocated a two man team. and a PM:. >supervisor. OK., Supervisor's salary, say, #30,000 a year. Two men, PM: >#20,000 a year each. But they'd need to work. in shifts -- so it would PM:. >be six men at #20,000 (which with on-costs would work out at more like PM: >#30,000 to the. employer.) PM:. > PM: >So,. we're talking #30,000 x 6. #180,000. plus say, #40,000 for the PM: >supervisor. #220,000.. Then you've got the hardware involved. And PM: >any transcription that needs doing. You don't. think the 'Big Boss' PM: >would listen to hours. and hours of tapes, do you. PM:. > PM: >So, all in all, you couldn't actually do the job. for much less than PM: >a quarter million a year. Over five years. What are you doing that. makes PM: >it worth the while of the state to spend over. one and a quarter million PM: >on. you? Those are pretty much the sort of calculations that went through. my head once I stopped to consider what it must be costing them to run. this operation. At the very least, a quarter million. a year - and probably much more, given the intrusive. and human-resource-intensive methods employed. Times nine years. Equals well over two. million pounds - and probably much, much. more. Its wasteful for someone with my. skills to be unemployed The wastefulness of the. MI5 campaign against me is not just that of futile expenditure on their side. It is also. extremely wasteful for someone with my talents to be. unemployed and on a disability pension. I am highly qualified in numerate disciplines, yet. am unable to work, specifically because of. the MI5 hate-campaign against me. It is a terrible waste of resources for a. supposedly efficient economy like that of the UK to be squandering the talents of. a skilled and capable worker. I made every effort to remain in employment for. as long as I could, but ultimately I was defeated by MI5s employment. of massive resources specifically targeted on my workplaces with the sole aim of. seeing me evicted from those workplaces.. You might expect this sort of behaviour from the Stasi or some. other secret police force in a communist country where labour. is cheap, and the governments aim on seeing its citizens confined; but for a supposedly. free and efficient economy like Britains, the wastefulness. resulting both directly and indirectly from the Security Services. activities is simply criminal, and should never be allowed. The international dimension means. the costs are multiplied many times overoer had any sense, then they have surely. taken leave of them over the last nine. years. Four. years of persecution in Canada The persecution re-started within less than five minutes of my. arrival in Canada, as documented. above, and in the "frequently asked questions" article on the website. The words, "if. he tries to run away well find him" spoken by. one of the harassers at Toronto Airport are now imprinted on. my mind. A year later. I emigrated to Canada, intending to find a job and settle there, hoping that MI5s interest. in me might dim with time. I did manage to find work. there, but my hopes of avoiding Security Service interest were ground into dust. As detailed above, I. saw the same man in November 1996 and July 1998, both times. in Ottawa. Apart from these encounters, there were numerous incidents between. 1994 and 1998 of harassment, of an identical nature and in most cases using identical. words to what had occurred in. the UK. It became quite clear to me that the permanent surveillance. and harassment operation which MI5 had subjected me to in England was being. continued. For a team of four or five men to be employed overseas. must cost a lot more than if they. operate in their home country. And for MI5 to continue the operation for a period of. over four years, continuously, must cost many hundreds of thousands of pounds. This. confirms my belief that the state is funding. the campaign against mehat the Security Service receives current annual funding of #160M. Divided by 1850 staff, works out. at #86,000. But the. unit annual cost of each "watcher" must be much higher than this, especially given the frequently mobile and. overseas nature of their actions of the last few years. A very. conservative figure might be a little over #100,000 pa. for each of a team of five people, or half a million pounds per year. For nine years,. so far. So the most conservative estimate of the surveillance element alone is perhaps four or. five million pounds. since 1990. This guesstimate is of course theoretical - I am not. privy to inside details of how MI5 split their funding.. But to take some other examples, the cost of a. US counter-surveillance specialist per day is USD 5,000.. Even if the agents permanently assigned to me are not of this calibre - even if. they employ specialists when difficult work planting bugs etc is encountered - their salary. and support costs must still be very high. The individual agents are doing well for themselves as they. are well-paid to exercise psychopathic. instincts which in any sane society would see them in prison; but the taxpayers who must. fund this terribly wasteful exercise are being "done" out of hundreds of thousands. of pounds each. year. It must be emphasised. that the above estimates are highly conservative. Besides the surveillance operation, it. must carry a high cost. in man-hours to propagate covert slanders through the population; to setup and maintain the "interactive watching" links to. TV and radio stations,. which these organisations continue desparately to "lie and deny"; and to induce antipathy in co-workers which would not. otherwise exist. Why they are. wasting Millions of Pounds on a "Nobody from South London" As remarked in the prologue. to this article, it is really most extraordinary that the Security Service. spends a chunk of its budget, every year for nine years so far, on a meaningless. campaign against a "nobody from South London". That they are. spending such a large amount of money has been confirmed to me on several occasions,. usually by oblique references. to "its costing this country millions". The supposed "logic" behind the persecution is that MI5 wish to. avoid their harassment of me, and the involvement of the UK. media, to be made public; yet as the reader will appreciate that is a. circular argument, "theyre doing it because they want to. keep it secret and avoid humiliation for themselves and their country" begs the question, "why did they start. doing it in the first place?", to. which in truth I myself do not know the answer. Plainly MI5 with its rich budget can afford. half a million pounds a year to waste on a "nobody from South London".. Some time ago I was talking to a British surveillance professional. on Compuserve who told me "this work costs a lot. of money and is usally because the person I am following has done something (usually criminal) to warrant all this money and time. being spent." Yet in this. particular case it is plainly not the "victims fault" that the harassment. is taking place. The hate-campaign against me is completely the creation of the obsessive psychologies of. the MI5 agents who have made themselves my. persecutors; it is obviously a "personal" campaign for them, and for . years they misuse taxpayer funding to feed their insane, unnatural and fixated. fantasies. 1972 From evemvfi na yahoo.com Wed Dec 26 10:00:47 2007 From: evemvfi na yahoo.com (evemvfi na yahoo.com) Date: 26 Dec 2007 09:00:47 GMT Subject: M'I`5 Persecuti on F our Ye ars of M I5 Persecuti on Pos ts on In ternet Newsgro ups Message-ID: Four Years of "MI5 Persecution" Posts on Internet. Newsgroups For approximately the first three years of. the MI5 persecution, from June 1990 until. late 1992, I kept as quiet as possible, in the hope that by not reacting, MI5s interest. in me would decrease and they would simply go away of their own accord. This is the sort of behaviour some people. employ against bullies; if the bullies. arent getting a reaction, then they might simply go away and victimize someone. else. Unfortunately, this tactic didnt work.. The quieter I became, the more shrill and hysterical the noise from the Security Service operatives.. For about. two years I didnt watch TV news at all. Yet this only heightened their obsessed fixation; they continued to follow me wherever I went,. they continued to induce harassment at work by managers and fellow. workers, and they continued to encourage. me to commit suicide. They seemed to regard my refusal. to react as a crime which they would have to "put right" by ever more extreme. forms of abuse. Finally, in 1995,. I changed tactics radically. Since late 1994 I had had accounts with internet providers in Ontario, Canada. I discovered. the cornucopia of internet newsgroups, on. every topic from consumer electronics, to politics and legal topics,. and I discovered online services such as Compuserve and AOL.. In May 1995, I made the first posting to the conspiracy newsgroup,. on the subject of "BBCs Hidden Shame". BBC's. Hidden Shame The internet newsgroup discussion, which has now reached its. fourth anniversary, started with an article in alt.conspiracy, which I. reproduce here. Date: Thu. May 4 18:27:24 1995 Newsgroups:. alt.conspiracy Subject:. BBC's Hidden Shame Remember the two-way. televisions in George Orwell's 1984? The ones which watched you back? Which you could never get rid of, only the. sound could be turned down? Well the country which brought Orwell into the world has made. his nightmare follow into the world after. him. Since 1990 the British have been waging war against one of their own citizens using surveillance to invade privacy and a campaign of abuse in. the transmitted media in their efforts to humiliate their. "victim". And the most remarkable thing about it is that. what they do is not even illegal - the UK has no. laws to protect the privacy of its citizens, nor does it proscribe harassment or abuse except. in the case of racial abuse. A lot of people in England know this to be going on, yet. so far they have maintained perfect "omerta"; not a sound, not a squeak has escaped into the. English press, and for all the covert harassment absolutely nothing has come out into. the public domain. Have the British gone mad?. I think we should be told At this point, I did not name MI5 as my. persecutors. I was still unsure that. they were the ones responsible for the "psychological terrorism". In followup posts however. I did name them; and the persecutors have never denied the claim;. so I think my guess is valid. (The Security Service Tribunal in 1997 have. said "no determination in your favour was made", but it. is a well established fact that MI5 lies routinely to the Tribunal which has never. found in favour of a plaintiff, so no conclusions can be drawn. from this.) This first post was made to alt.conspiracy, but. further posts were made to the UK-local newsgroups, in particular uk.misc but. also uk.legal and uk.politics (which. is now called uk.politics.misc). Some time ago I tried to take the battle to the. Compuserve forums, UKPOLITICS (which is now called UKCURRENT - current affairs), but my articles were censored by. the forum operators. Such. censorship is impossible on the internet newsgroups. Police Refuse. to Act I have complained several times to the. Metropolitan Police, who have each time refused. to help. From:. Green Newsgroups:. uk.misc,uk.politics,alt.politics.british,soc.culture.british Subject: Re: MI5. Persecution: Why Aren't the British Police Doing Their Job? Reply-To:. Green na guidion.demon.co.uk Date: Sun Apr. 7 21:13:30 1996 In article. . bu765 na torfree.net "Mike Corley" writes: >Last Easter (1995) I went into the local police station in London. and spoke to >an officer about the harassment against me. But I. couldn't provide tangible >evidence; what. people said, in many cases years ago, is beyond proof, and >without something to. support my statements I cannot expect a police officer to >take the. complaint seriously. This. in itself dos not suggest that the police have it in for you. The old bill operates on extremely tight spending limits forced on them by. that pillock Michael Howard, and without evidence, they often have higher priorities. than chasing something that cannot go to. court. I doubt that the. police are actually being leant on, but they probably realise that if they looked into this, they would be leant on hard. The met always stays away. from anything that looks like it has Defence,. Security or secret service interest already, because they realise that. they are below these government agencies in the general pecking. order. If I. walked into my local nick and complained that MI5 were snooping on me, they would show me the. door without even looking at my evidence, because that bored desk seargant with only five years. to go before he retires doesn't want to start fucking about with somebody who. has incurred the wrath of Stella Rimington. He would rather deal with the lost dogs and driving licence producers, eat his cheese and pickle. sandwiches and piss off home at. the end of his shift than have some high ranking spook having a go at his boss and. getting him a bollocking. In short, you have earned. much sympathy but little surprise. Just remember that saying about the enemy of. your enemies. Most recently, I wrote in March 1999. to Charing Cross Police Station CID. They did. not acknowledge or reply to my letter. When I phoned them up, the detective Id written. to treated me to a sadly not unusual display of police bigotry, with an uneducated rant about. "your paranoid rubbish". It would be nice to think that such uneducated bigotry is. something other than wholly typical of police behaviour, but unfortunately. that is an illusion. that is rapidly dispelled. Uncorruptible Jon Snow of Channel Four. News >From previous articles. the reader will know what I think Jon Snow has recently been watching me. while he reads Channel Four News in the evening. Recently I digitized a few. moments of one such broadcast, where his face. twists into a smile, without there being anything in the news broadcast to cause merriment. Here is a usenet post from some time. ago on MI5s "bought and paid for" tools in the so-called "free". press. Peter Harding (harding na ermine.ox.ac.uk). wrote: : I was at speakers' corner on Sunday. There was one chap who was. bellowing : about something or other, I don't. know what, but one thing he said to : someone caught my. ear: :. "BBC, MI5, same thing." Can't disagree. with that sentiment. Wasn't it documented. that MI5 sometimes "bought" journalists and broadcasters? I remember reading a report by some jouralist. who had been offered an extra tax-free income by MI5 to become their covert. mouthpiece, and had refused. ............................................................................. > :. >mouthpiece, and had refused. >. : > : It was Jon Snow of Channel. 4. > > Was it reported in. any of the papers? It has been reported several times.. The most recent was in Private Eye, a few months back. As I recall they also wanted information. from him; journalists would be. a natural choice for members of the Security Service and the Secret Intelligence Service for information. sources. > It. might be interesting to see what he had to say regarding their > attempt to. recruit him. He was most concerned that many. others would have accepted such an offer.. However, we can probably make an educated guess as to some of those who. accepted: Nigel West (Rupert Allason, MP) and Chapman Pincher would come near. to the top of the list. -- \/ David Boothroyd. Socialist and election. analyst. Omne ignotum pro magnifico. British. Elections and Politics at http://www.qmw.ac.uk/~laws/election/home.html I wish I was in. North Dakota. Next General Election must be before 22nd May '97 The House of Commons now : C 324, Lab 272, L Dem 25, UU 9, PC 4, SDLP 4,. SNP 4, UDUP. 3, Ind 1, Ind UU 1, Spkrs 4. Government majority = 1. Telephone Tate 6125. Corrupt Security Service agents steal millions from. taxpayers Money is of course a factor in the grand. equation which is the MI5 persecution. It costs money for the Security. Service to "buy" people in the media etc. But that is only a small part of their. expenditure of taxpayers resources. Most of the expenditure is. directly on the salaries if the agents involved; and in this post. I put forward the theory that MI5 are trying to draw out their involvement. for as long as possible, very cynically, to. maximise their income and line their own pockets. At each stage they have tried to pretend that. I am something out of the ordinary. Either I was very. stupid ("he's an idiot") or very clever ("he's like a genius"). Either I was a threat to Western civilization (Levin once. referred to me as the next Hitler) or I was. completely defenceless ("a soft toy"). Now, it should be obvious to any person with. common-sense that I am not out of the ordinary in any. way. I have an IQ which is average for the Web, I am racially white European, and there are plenty of other people with schizophrenia or epilepsy. out there who haven't been targeted for MI5 attention, so why. me? I think the answer is that the MI5 agents who harass. me have cynically exploited the situation by painting me as extraordinary. in order to assure themselves of well-paid employment funded by. the ordinary British taxpayer. To put it bluntly, they are stealing millions of pounds from. the taxpayer to feed their own pockets. This assertion is supported by the observation that it's the same agents who. are doing the harassment. Six months ago in a local hospital I was harassed. by someone whose face I had seen (he had stared straight at me aggressively, at the time I just. thought it was some. nutter but it turns out he was one of "them") aboard a KLM flight a couple of years ago. It's presumably been the same people most. of the time. I've seen the way contractors act when they don't want their positions terminated.. Would these agents really want to lose. their well-paid employment harassing me? Presumably they are promising their bosses a "breakthrough" (ie my demise). real-soon-now and have been for the. last seven years, while all the while these MI5 agents skim millions off the. taxpayer. I wouldn't mind a. job like that. Perhaps if I persecute myself a little bit, like standing in front of. a mirror and shouting mindless obscenities, do you reckon I'd get a. slice of the caky Service Tribunal. This year Nick Brooks, current Tribunal Secretary, confirmed to me that. he could not think of a single case where the Tribunal had found in favour. of a complainant. Here is my usenet post from. two years ago. Subject:. MI5: "It wasn't us" Newsgroups:. uk.misc,uk.legal Organization:. Toronto Free-Net "The Security Service Tribunal have now investigated your complaint and. have asked me to inform you that no. determination in your favour has been made on your. complaint." Signed ER Wilson,. Tribunal Secretary Well that's a relief then. All that spamming for nothing eh.. Gaw blimey, if they say they're not doing it then it can't. be them, can it? In a recent letter to Mr. Brooks I expressed the opinion that the Tribunal were unable to fulfil their. responsibilities in the face of MI5 falsehoods. Nevertheless, I do. intend to make another complaint to the Tribunal in the near future, despite the Tribunal appearing. to be a toothless. watchdog. Discrimination against a. Unit Minority MI5 have been very clear in their instructions. as to what I should do. They have openly shouted at me the. word "suicide", and also from the other abuse. it is clear that they want my existence terminated. This point is covered in more detail. in a previous article. The following post describes. the xenophobic nature of MI5s campaign against me. They have refined their bigotry down. to a unit minority, yet they make use of the discrimination against. the mentally ill which is a feature of current British. society. Subject: Re: MI5. says "Kill Yourself" Newsgroups:. uk.misc,uk.legal,uk.politics.misc,uk.media References:. <53eeev$cmg na axalotl.demon.co.uk> Organization:. Toronto Free-Net Distribution: iain na hotch.demon.co.uk (Iain. L M Hotchkies) wrote: >Indeed. If. you've ever had a 'conversation' with someone suffering >from florid schizophrenia, you'll know how. difficult it can be to >'argue'. with them. I don't have florid symptoms. But I'm in. a difficult situation, because those people who don't know, aren't. going to believe, and those who do, they just go along with the crowd. It's never a. good idea to go against the grain, and the grain here is. defined by interests in the establishment and the media. Even people who could say out loud what was happening. won't, because then there's a risk that they'll be seen. as traitors and ostracised. Usually this. type of 'hidden abuse' is racial and targetted at a racial minority within a. country. You keep the minorities out of the good jobs, but you don't. admit discrimination exists. It happens everywhere, not just in Britain. The persecution that is. going on now is in reality a refined form of racism. Instead of "nigger" it's "nutter", and abusing the mentally ill. is still socially acceptable today. In 50 years it might not be, but today. there isn't any social or. legal sanction against it. So really they've refined racial harassment down to a. minority of one. The words may be different, but the methods. are the same. 3442 From evmimevei na yahoo.com Wed Dec 26 10:16:58 2007 From: evmimevei na yahoo.com (evmimevei na yahoo.com) Date: 26 Dec 2007 09:16:58 GMT Subject: M'I-5 Per secution B BC Newscasters Li e & Deny The yre Wa tching Me Message-ID: MI5 Persecution: BBC Newscasters Lie. & Deny They're Watching Me Central to the persecution. campaign waged against me for some nine years now by the Security Service is their use of the media, and in. particular the broadcast media, to make clear to me. that I am under surveillance and being watched within. my own home, even by BBC newscasters while they read the news. This is really an. act of arrogance; MI5 and their tools in the television and radio are so sure that they can never be caught,. that they have many times made explicity clear on broadcast programmes that they. are as capable of. seeing me as I am of seeing the broadcast pictures. Even when they have known. I am taping the programmes they still carry on this practice; for examples of TVand radio presenters caught "in. action", see the Evidence area of. my website. If. you wish to reply to this article...... then please include your name and fax number! I provide the means. for recipients to send me their. thoughts on the topics discussed, but ask that you provide me with. your fax number or email address if you require a response. Also would you please send not more than one or two pages,. if by fax.. Thank-you! It started with a Newscaster, and it. continues with Newscasters today The very first incident in the. story started with a reaction by an ITN newscaster, Sue Carpenter, in June of 1990, almost nine years ago. now. She reacted to what she saw in my living room at home as. she read the news. My mother. had brought an apple for me into the room, whereupon the newsreader smirked and giggled, apparently finding this funny.. I couldn't believe what I was seeing. I carried on watching news and. other television programmes to see if. presenters would show signs of "interactive watching"; to my surprise, this. happened again and again. Unfortunately, I did not have. my wits sufficiently about me to videotape these programmes, and it is. now almost impossible to obtain recordings dating back to 1990. However, I have been busy recording everything Ive watched the. last couple of years, and the taping has yielded some. nuggets, which you will find if you point your Web browser at. the "evidence" area of my website, whose URL address is given above. Strangely it is. not particularly the BBC who are "after. me" at the moment (with the exception of occasional fire from Nicholas Witchell), but. that supposed paragon of virtue and decency Jon Snow of Channel Four TV News. (he actually works for ITN), who once claimed hed turned down MI5s offer of. a tax-free salary. I will cover Snows recent actions in a future. article. BBCs. Hidden Shame The first ever Usenet post (internet newsgroup. article) on the subject of the MI5 bugging. / BBC watching occurred, as stated in a previous article, in early May 1995. It is reproduced. here; Date:. Thu May 4 18:27:24 1995 Newsgroups:. alt.conspiracy Subject: BBC's. Hidden Shame Remember the two-way televisions. in George Orwell's 1984? The ones which watched you back?. Which you could never get rid of, only the sound could be turned. down? Well. the country which brought Orwell into the world has made his nightmare follow into the world. after him. Since 1990 the British have been waging war against one of their own. citizens using surveillance to invade privacy and a campaign of. abuse in the transmitted media in their efforts to humiliate. their "victim". I suppose "BBCs Hidden Shame" is more of a wish than a fact. It may. be hidden, but the BBC and other. media and security organisations seem to have no shame whatever in their anti-social, not to say. criminal, actions. Nor do the general public, who seem quite happy to. parrot the vilest obscenities without much hesitation or apparently. thought. Martyn Lewis, Nicholas Witchell and. the rest Most of the harassment occurred in 1990-92,. when I wasnt making any recordings, and the BBC wont. release copies of current affairs programmes from that period.... so although I. can remember there were many incidents in that time, even many specifics, I cant dig up the actual. programmes to flesh out the. bones. This year, there has been at least one incident with Nicholas. Witchell as newsreader, which I have successfully. recorded and digitized, i.e. converted into a computer Quicktime movie file.. This has not yet found its way onto my website (Im a busy. man, dontcha know) but you can be sure I will let the readership of. these articles know when that clip makes it onto the web. The Witchell clip was recorded on Saturday 10. April 1999 at 7pm, and shows Witchell. trying to restrain his features from collapsing into a smirk. First his upper. lip quivers for several minutes, then with the non-excuse of a non-joke his entire face. twists into a grin. It looks as. if he finds me so funny, that he allows himself to submerge any pretence at professionalism in a sea of. MI5-inspired sarcasm and harassment. The two BBC newscasters whose reactions to me I can. remember most vividly over the years are Martyn Lewis and Nicholas Witchell.. I can remember thinking years ago that Michael Buerk was also seeing me at. home; and if the. other two are watching then there would be no reason why he wouldnt be doing the same; but in all honesty I cannot remember. a single clear instance of his reacting through facial or verbal expression. to me. I can remember several instances of Martyn Lewis. reacting to what he saw of me, however. In early 1992 I was watching the BBC news with Lewis on. a small black-and-white portable TV at my. then home in Oxford. I threw a term of abuse at Lewis; he flinched, then gave. a grin and made a comment from which I understood that he had been on my side, but. might have changed his mind as a result of what Id. just said to him. And in spring 1991 I remember Martyn Lewis clearly reacting to what he. saw of me at my then accommodation in Woking, Surrey, by continuing. to stare at some fixed point. near the camera after the news had finished - presumably this is where the. monitor interactively showing pictures of my room was. located. Why would BBC. and other Newscasters Watch and Harass Me, Watching Them? This is a very difficult question, and I dont. actually know the answer. It is a matter of record that the. Secret Services are very much part of the Establishment. The recent exposure of the. "MI6 Agent List" on the internet, and its coverage in the newspapers, reveals how much MI5. and MI6 are recruited from the ranks of the Establishment.. Obviously the relationship is bi-directional; the Establishment influences. MI5/MI6, but the secret services (well, perhaps not so secret now. we know who works for MI6!!!) also influence. the machinery of power and information dissemination i.e. media in this country. So they. must have a lot of covert leverage with. the BBC and ITN. Some of. this leverage is obviously through bribery. It is a matter of record that MI5 tried some years ago to "buy" Jon Snow of Channel. Four TV. He turned them down - obviously they. must have approached other media people as well, and from. the lack of other reports of people turning them down, it may be presumed that some other journalists will have. accepted the sugared carrots put before them. Ironically, Jon Snow has been. taking part in the recent "watching" actions against me - but why he. has allowed himself to be. used by the secret services is something which I do not know. Perhaps the Security Service uses blackmail to twist. arms of journalists into co-operating with them? I. have always thought there was something slightly odd about Martyn Lewiss demeanour. At the time of the Ron. Davies "rough trade" scandal it was reported that MI5 had. known all about Davies predilections and the sham of his. pretence to be a happily married man. Perhaps MI5 have been able to dig something up from. Martyn Lewiss private life to blackmail him into acting on their behalf? And if. there wasnt. anything before the "newscaster watching" started then there most certainly is. something now.... once theyve started watching, the newscasters will surely wish their activities to remain. covered-up, and co-operate with the security. service. "Newscaster. Watching" Deliberately Constructed to Mimic Schizophrenia Presumably this is the first case in history. of television journalists actually taking part in acts. of real-time, live spying and reacting against one of their viewers. What you have. to understand, though, is that I was quite mentally healthy in June 1990, certainly relative. to November 1992,. when after two and a half years of harassment I was finally admitted to hospital as an out-patient. MI5 decided from the outset that. they would make me mad; they constructed. the media harassment to resemble what would be reported by a person with mental illness; and. then they carried on years of abuse to inflict on me the condition which. they wished to use as an excuse to cover up. their abuses. I sold my portable TV. in autumn 1990 and stopped watching television regularly. I realise now that this may have. been a mistake. What I should have done was to watch TV. and listen to the radio, but tape-record everything and make a note. of what each excerpt meant to me. I would then be in a much stronger position as regards to evidence that I. am now. That is what I am trying to do now, but. unsurprisingly the TV/radio presenters have stopped getting at me, now they know they are. being recorded. When I started. publicising my case on internet newsgroups in 1995, I was met with the disbelief one. might expect to be accorded to a mentally ill person who talks about. "newscaster watching" and media persecution. Some newsgroup participants thought I. had started a "troll", an invention made to obtain a reaction; one bright. spark even suggested a group of psychology students were behind the articles. But most people thought. the articles were. symptomatic of derangement - and that is exactly what MI5 want people. to think. MI5 chose me as a target because I was mildly mentally ill. at the outset in 1990, although I stress my illness then was very mild in. comparison with November 1992, and because they knew that enough abuse would (a) make me much more seriously ill, and (b) once. I was more ill, they would. "get away" with a harassment deliberately constructed to. look like the symptoms of paranoid schizophrenia. Martyn Lewis Denies & Lies, But Wont in. Writing In February 1997 I wrote to BBC Viewer &. Listener Correspondence and asked them to investigate the claim that their newscasters. had engaged in "real-time. spying" on me. They replied that they had asked Martyn Lewis and Michael. Buerk whether they had engaged in such practices, and that they had both made verbal denials to VLC, but were refusing. to put their denials in. writing. To me it looks as if Lewis and Buerk are happy to lie verbally but. not in writing, because written falsehoods would place. them unambiguously in the wrong, whereas they can try to talk their way out of verbal lies. if they are ever caught, or perhaps even deny the verbal lies. completely? If they lie without shame,. then why would they have any shame about future lies about. lying? BBC-VLC. also said that the BBC "would never engage in any form of surveillance activity" such as that. described. Clearly Martyn Lewis and the rest have. lied to their own organisations personnel about their criminal actions. So much for the. "objective", "truthful" BBC, a nest of shabby. liars. Summons against the BBC,. for Nuisance caused by Newscaster Spying In March 1997. I issued a civil summons against the BBC, seeking injunction against further. "newscaster spying", and token damages for what the BBC had done to me until that date. The purpose of. the summons was to try to "smoke out". the BBC, since obviously I did not have good evidence which would be. necessary for either a civil or criminal case to be made against them. My summons was worded as. follows; 1. The plaintiff is and. was at all material times residing at [home address]. At. some time prior to or during June 1990, persons of unknown identity. entered Plaintiff's premises and installed concealed television equipment in. said premises. 2. A campaign of harassment was launched. against the Plaintiff by the persons of. unknown identity, which in part took the form of instigating harassment by BBC TV newscasters (including specifically Michael Buerk. and Martyn Lewis) as they. read news bulletins, by making direct and personal comments. to Plaintiff. 3. The. campaigns purpose was to subject Plaintiff to great mental stress and induce mental breakdown. As a result of it Plaintiff did. indeed suffer from. severe mental strain in 1990-97. 4. In order to avoid the mental strain being caused to him the. Plaintiff has been compelled to stop watching BBC TV. news. Defendant therefore committed the tort of. private nuisance, since normal use of home was interfered. with. 5. Plaintiff claims a permanent. injunction prohibiting further nuisance, and damages for. nuisance suffered limited to 5,000. Naturally, my attempt to smoke-out the BBC. and its lying newscasters failed. The. BBCs litigation department sought to have my summons struck out; and they succeeded in. doing so, on the grounds of my action "disclosing no reasonable cause of action". I was also prevented. from issuing further civil claims against the BBC without leave. of the Court. Apparently litigants-in-person. frequently / usually have their claims struck out. with this wording, regardless of the merit of their claims. BBC Suppresses my Claims of "Watching by. Newscasters" BBCs staff magazine Ariel ran my advert "BBC Newsreaders. Spying on my home" for one issue in the Personal category on 8/July/1997 before it. was spotted. and axed by editor Robin Reynolds; please see webpage;. http://www.pair.com/spook/evidence/plaint/ariel.htm Clearly the BBC will not allow claims of its wrongdoing to be. made public in the media. channels it controls. On. several occasions people said to my face that harassment from the TV was happening. On the first day I worked. in Oxford, I spent the evening in the local pub the Rose and Crown with the company's technical. director Ian,. and Phil, another employee. Ian made a few references to me and said to Phil, as if in an aside, "Is he. the bloke who's been on TV?" to which Phil replied, "Yes, I think. so". The reader might think that mere "watching" by newscasters etc might. be a relatively benign happening. But it is not; it. is part of MI5s framework of harassment and. lies. On many occasions the reactions of the BBCs newscasters to. me has been in the nature of sarcasm, implicit contempt and abuse. This is visible in. Witchells news programme mentioned above, where he engages in abuse. by laughing at me during his newsreading. It was particularly visible in the early period of 1990-92, and. as late as Autumn 1993, when. during a Newsnight broadcast Jeremy Paxman interviewed a football person about soccer hooliganism, and the interviewee gave. vent to an unsubtle rant. about "theyre idiots, theyre just idiots, keep up the surveillance". Paxman started grinning, showing. he understood and was taking part in the abuse being perpetrated. on that programme. Conclusion The MI5 Persecution started with harassment by. television newscasters, and today harassment by TV and radio presenters still forms a. key part of MI5s activities against me. When this. business started in June 1990 I was in relatively good health of mind. Years. of persecution by the secret police and their. mouthpieces in the state-run BBC and other media eroded my health until MI5 achieved their aim of seeing me rendered mentally ill. in November. 1992. The diagnosis which was forced on me unfortunately and ironically meant that my. reports of the harassment are disregarded, because the. mentally ill are second-class citizens in todays Britain. Yet. TV and radio harassment continues, albeit in a reduced form, despite my taping all the. programmes I watch, resulting in my being able to obtain and demonstrate objectively on the website instances of media. presenters attacking. me. Unfortunately these recorded instances are quite tenuous; I might understand them, the. presenters understand what it is theyre doing, but despite many thousands of. people knowing the truth of the "newscaster watching", the omerta continues and they. continue to refuse to admit the truth of the. matter. It is a terrible indictment of British society that there is not even one decent. person willing to speak out. I look forward to the day when the truth does finally emerge,. and the mass corruption which has allowed the MI5 persecution to take place is. finally purged and the Establishment criminals. caught and appropriately punished. 4912 From vmvemi na yahoo.com Wed Dec 26 10:30:54 2007 From: vmvemi na yahoo.com (vmvemi na yahoo.com) Date: 26 Dec 2007 09:30:54 GMT Subject: M-I,5.Persec ution ` Molestat ion d uring Tr avel Message-ID: MI5. Persecution: Molestation during Travel MI5s persecution of me varies in. intensity. Since 1990 it has been steady for perhaps 80% of the time; there was a notable quiet. period in 1993, and another quiet. period in Jan-Feb 1995, as well as a hiatus in the first two months of 1999.. It puzzles me that they cease and restart, seemingly without any. logic or reason. But one aspect of MI5s activities against me which is relatively predictable is this weeks. articles topic, which is Molestation during Travel. Almost every time. I cross the Atlantic, go to the Continent or even try to enjoy a holiday. in this country, you can bet that. MI5 will be there doing their utmost to wreck it all. This aspect of the. harassment is particularly relevant as I will be travelling to Europe again in a months time,. with naturally the Minidisc recorder in tow; so it will be. interesting to see if I can record the abuse which. will almost certainly take place, either on the Tube going to the airport, at. the airport, on the flight, in the terminal building - MI5 have previously. instituted instances of abuse at each of these locations, so well see how much taxpayers money they waste this time, and whether. it will prove. possible to capture their abuse on minidisc. Read about the MI5 Persecution on the. Web June 1992. in Polands mountain resort of Zakopane The persecution. started in June 1990, and for the first two years I stayed in the. UK apart from a couple of brief day trips to Calais. By the summer of 1992 Id had enough of being cooped up in. England with abusive fellow employees egged on by an abusive secret police service, and. decided to spend 10 days. in southern Poland, on what was intended to be a holiday at the. mountain resort town of Zakopane. Unfortunately the psychopaths. of the Security Service were not willing to allow me. to enjoy a holiday in peace and quiet. The journey to Zakopane was by coach from the meeting point at Londons Victoria. coach station (National Express) followed by ferry. followed by another coach across Europe. As we left Victoria a youth. and his girlfriend started a loud tirade of abuse directed at "this bloke", where the. "bloke" was never named, but it was very clear that the. "bloke" was myself. The youth said "they" had "found somebody from his school, and he was. always really stressed at school, a real. psycho". Again, the label "they" was not elaborated on, but it was clear. that "they" = the persecutors from MI5. The boy also said, "he was in a bed and breakfast for only. one night and they got him". By a. not unexpected coincidence I had been in a B&B in Oxford. a week previously, which had been booked from work; other things lead me to the conclusion that the company's offices were bugged for. most of. the 2 1/2 years that I was there, so "they" would have known a room in the. B&B had been booked. After a few minutes of this I went back to where they were sitting and asked where they were travelling. The boy. named a village in France, and. the girl's giggling suddenly ceased; presumably it permeated to her brain cell what the purpose of. the boy's abuse was. It is now very. clear to me that MI5 were trying to have me incarcerated, assaulted or killed on this trip across. Europe. The degree of verbal violence inescapably leads to this conclusion. When we. arrived at our destination,. it became clear that many people, both in our tour group and its guide, and among the ordinary residents of. the town, knew there was a movement. under way to "get" me. MI5 employed many people and significant resources for an action which they knew would only. take a maximum of ten days. A commercial operation would never have felt. able to waste such resources. on such an unproductive and temporary action; only a state-sponsored, taxpayer-funded entity. like the Security Service would be able to be so. wasteful. To give some examples of what happened in those. ten days; I was walking in some woods outside the town, when a. Polish woman, looking at me, said the English "shit" in. a strongly Polish-accented voice. For the first three years 1990-92 MI5 had. been trying to force this word on me. Another example; I was. walking near my "hotel" when a mother said laughing to her child, "a wiesz ze to. prawdziwy wariat" which means "you know hes a real madman". And the. "TV reacting" happened there too; on Polish TV, a bemused looking journalist said to. another, "to jest sprawa Anglikow", which means "its the concern of the English", in other words,. none of our business, despite what. the English are trying to force down our throats. Just. before we left for home, I went with some others from our group to a nearby bar. There a man shouted at me. the same sexual obscenity which MI5 have constantly thrown at me these last three years. I think MI5. try to justify their various terms of abuse by repeating them at. me until I say them, either while conscious or while talking in my sleep; and. then they seize on my saying those words to "prove". that the obscenities are "my fault", et cetera. This rather stupid reasoning of theirs. can actually be seen as indicative of the psychopathic condition attributed. to them in a previous article; blaming the victim for the crime you inflict on. him is how psychopaths. think. Nor did the persecutors let. up during the return trip. Returning on the ferry over the channel,. a rather insalubrious-looking guy talked to his mates about. "and you know this bloke, hes really mad you know, hes really mad". On the National. Express return coach to London, a group of five or six young people started shouting at me.. I slumped in my seat and tried to avoid presenting a target, so they got ever more strident. - "whats the matter. with you, cant you hear us?" One of the other people who had been on the trip to Poland asked. them why they were shouting at me, and they said, "hes been to Cambridge", to which the co-holidayer asked. them, "have you been to Cambridge?". presumably thinking they were aggrieved fellow students, but they. answered "no". Even after I left the coach at Elephant and Castle abuse continued;. in the tube station, two kids started throwing abuse. at me; one of them said to the other, "and you know he works?" to which the. other answered "yes". Immediate Aftermath of. November 1992 As you will know from previous articles, my manager at OCG -. ARIS/Oxford, Mr Mitchell, induced. a mental breakdown in me in the months leading up to Nov/92. The diagnosis was regarded by the persecutors as. a victory for them, because few if any people give credence to allegations of. harassment when they are made by somebody suffering from schizophrenia. There. is also a bias against the mentally. ill, an "institutionalised bigotry" in society comparable to the institutionalised racism against. blacks. However, MI5 did not let up on persecuting me. following Nov/92. In December 1992 I flew by. charter jet to Alicante in Spain for two weeks recuperation.. MI5 planted one of their people on the flight, a youth who tried to. start some noises that "hes a nutter". One of the other passengers replied, "oh hes a nutter is he? oh well!" and the. youth shut up and said nothing for the rest of. the flight. I think it would be fair to say that the youth on the flight was embarrassed by what he. had been asked to do in making the. flight "uncomfortable" for me; he sounded defensive rather. than aggressive. My first trip to Canada in June. 1993 Ive already covered this in. a previous article so Ill just give a brief summary here. On 10 June 1993 I flew British Airways. from Heathrow to Torontos Pearson Airport. On de-planing from the aircraft, one of. a group of four fellow. passengers looked at me and said, laughing, "if he tries to run away well find him".. It was quite obvious that these four men were the ones who had been. harassing me since 1990. I did. nothing to apprehend them or bring this incident to the attention of the airport authorities, mostly because this was my very. first visit to Canada, and the last thing I wanted was to get into a. dispute before I had even finished disembarking. In retrospect,. I can see this was a terrible mistake; I should have made. every effort to detain and identify these people. Subsequently I have made numerous attempts. to obtain the names of these people from British. Airways passenger lists, by talking to BA, through a lawyer in Ontario, through a solicitor in England, through the UK. police, and also through. private detectives in the UK. But all my efforts have come to nothing. BA have told me they. keep passenger lists for a period of seven years, so they will still have the list for this. 1993 flight. I did not see or hear anything during the rest of my. visit to Ontario in 1993 which would have lead me to believe that I. was being watched or followed. Journey across Canada in summer. 1994 As I think Ive. already said in previous articles I emigrated to Canada in late May 1994. For six weeks between late. May 1994 and early July 1994 I travelled across Canada. from coast to coast, starting in Toronto, visiting various cities and ending. up in British Columbia. I saw this both as something of a holiday, and the chance to get to know. a little better my adopted. country. As you can guess, MI5 followed me. everywhere I went during these six weeks. In Toronto, where I started this trip in late May,. I was spoken about by one youth to another with the words. "hes an idiot", to which the other replied, laughing sympathetically, "good luck to. him". A couple of days. later I went to Montreal and stayed at the YMCA downtown. As you can guess (this is all. so predictable, isnt it?) MI5 followed me there and bugged my room. at the YMCA. Not only that, but they managed to set-up an instance of "newscaster reaction" from a. local television station; while. I was watching a Vermont TV news programme on the set. in my room, the woman reporter said, "well theyre just tired and they. want to go home", which sounds like a pretty unprofessional thing to say until. you realise she was trying to say of me that I was the one that was. supposed to be tired, and they (ie MI5) wanted me to go home to the UK. On the bus journey. across the North American continent, it was quite clear that. MI5 were following me every step on the way. For the first part of the journey they actually put someone on the bus with me, a. youth who said at me "that guys paranoid" and tried. to incite other passengers to attack me. I stopped for a couple. of days in Winnipeg in central Canada, and on leaving the town heard on the radio a female. presenter ranting about "insanity! insanity!". It is. very tiring travelling such a long distance by bus; I took the journey in two steps, each of about 36 hours; and. it is especially tiring when you know MI5 are watching you. and harassing you every. step of the way. When I finally got to Vancouver, MI5 instituted the. usual harassment, in very short order. I was surprised how. quickly they were able to induce hatred towards me in elements of. the general populace; the Security Service must have employed a. number of agents and serious resources in a very short period of time; and for no real gain,. because I havent been back to BC for almost five years,. so all their "work" appears to be for nothing. In downtown Vancouver. a street person said in front of me, "theyre all talking about him". For a few days I was. staying at Pauls Guest House (345 W.14th Ave); on the day. I left, the owner Paul shouted at no-one. in particular, "hes going to Victoria" - which was quite accurate, I was. indeed going to the provincial capital Victoria on Vancouver Island. But I had not told anyone at the guest house where I. was going; I had only. mentioned to my parents back in England on the phone that I was going away from Vancouver for a few days. Which leads. me to suppose that MI5s bugging of the phone in my parents. house yielded the "intelligence" that I intended to visit Victoria, and they had passed. the information on to. Paul. When I got to Victoria it was. again obvious that the persecutors were "doing their stuff" there as. well. On the street I was identified as being English, although I had not. said anything so my accent hadnt given me away; and returning by ferry to. the mainland, I was abused by a Canadian woman who said, "hes a nutter! you can run. but you cant hide". During my years in Canada I. have never heard the word "nutter" on any other occasion; I do not think. it is part of Canadians vocabulary; so the Canadian woman on the ferry, who was obviously talking about. me, must have been supplied with. this word by the English persecutors. And once I got back to Vancouver, staying at the Austin Hotel. on Granville St, I listened to a conversation in the. apartment block directly opposite, and a man saying, "hes paranoid, so thats as bad as it can be,. so why are they doing this. to him?". Holiday. in the States, August 1995 By 1995 I was living in Canada, and in August I went down. the eastern seaboard to Florida and as. far as Key West by car. As you can guess (this is all so boring and predictable, isnt it?) MI5. followed me every step of the way. I can see in retrospect that this must have been quite easy. for them as they had my car bugged,. both on the inside to listen to anything that was said and what radio station I. was listening to, as well as what must have been a. tracker device installed to track it across long distances. The first city I. visited was Philadelphia. In the old Congress Hall where the first US Congress assembled,. the woman guide started referring to my situation, saying that "all these. people in Europe were watching it", and they were "a little paranoid". at this 18th-century experiment in democracy. Also I had recently written a newsgroup post where. Id described a (female) poster as "wet-nosed" (implying "canine"),. and a young girl in Philadelphia remarked, "so he thinks were dogs?" There. were two or three more incidents during. this holiday in the eastern States, including a radio station down near. Miami, showing "they" had tracked me all the way there,. and were bugging the inside of my car; but I didnt record the details and Ive forgotten some of it now.. Also down in Miami Beach a French tourist in a lift expressed support for me with the. words, "cest incroyable" ie. its incredible,. meaning that MI5s well-known actions against. me were beyond belief. To go back a. bit, in about May/June 1995 Id visited New York, again by car, and was insulted several times by people using the same. words that had been used against me in England. In. Central Park, and elderly Englishman. (not a real gentleman - but then the Engish view of themselves as "gentlemen" etc is quite laughable) looked at me and. said "idiot". And while I was. eating in a streetside restaurant a New York youth started laughing and said something. like, "I cant believe it, hes actually here" - I think that was because I had had. an expressed wish to visit New York for some years. before this, although after this visit I wont be going there again. for a very long time. Visit to Poland. December 1995/January 1996 In December 1995 I flew (BA again, unfortunately. - every time Ive flown BA one of these incidents has happened,. presumably MI5 is happier setting up harassment on British-domiciled. carrier) from Montreal to Berlin and travelled on. to Poland to visit family. MI5 naturally harassed me in Poland during my brief stay. They followed me around. and got Polish people to take part in the harassment. In one case. two Polish youths talked in front of me saying in English (with marked Polish. accents), "fucked up men, fuck you". There were also other incidents which I dont remember. too clearly since it was some. time ago. The return flight connected through Heathrow, and in the transit. lounge MI5 again set-up harassment against. me. In Poland they were talking their abuse in English, and in. London they set Polish people after me to speak in Polish; they heard me on the phone to. my father, and said "a wiesz ze to Polski. wariat", in an almost sympathetic, inclusive fashion (translation. "you know hes. a Polish nutter"). Once on the flight to Montreal I. was again set upon by two English youths, one of whom spoke and the other listened. The aggressive. "fat bastard" youth said, "if he wants to be a. wanker" (its my fault theyre harassing me, you see), self-justification that "hes. a nutter" (so we have to keep on abusing him, because hes ill), as well as talking about the town. in Poland where I had been staying. He also said, "he doesnt know who we are", but. as already remarked in a previous. article, that was at best a half-denial of my guess expressed in internet newsgroups that the people after me were MI5. - if anything its a half-confirmation. rather than a half-denial. These incidents are still going. on. You can hear digitised audio files of abuse on a BA flight to Berlin in 1998 on. the Web at address On. this flight they were again attacking my mental health; "paranoid, hes paranoid" and "nutter" are discernable. The last. "during travel" contact was at Ottawa Airport on 21 July 1998, when "Alan. Holdsworth" the psychopath MI5 agent, dressed. as a vagrant, was pacing aggressively in the departure area. In three weeks I will. again be travelling to Europe; we will see what fresh acts of molestation MI5 perpetrate during. this trip. 6382 From murry na seznam.cz Wed Dec 26 13:34:51 2007 From: murry na seznam.cz (Murry) Date: Wed, 26 Dec 2007 13:34:51 +0100 Subject: Linux live distribuce na USB s rychlym startem In-Reply-To: <1198610474.7088.1.camel@localhost> References: <1198610474.7088.1.camel@localhost> Message-ID: <20071226133451.46b93b17@seznam.cz> A ten arch umi ukladat na tu flash? Ja si chci take neco takoveho udelat, proste system (komplet), ktery pojede z USB flash karty (4GB). Nechci 'live', ale system ktery si 'pamatuje' co jsem zmenil, ulozil, stahl..... Nevite o necem? neco jako puppy, ale 'lepsi' ......... Diky Petr Dne Tue, 25 Dec 2007 20:21:14 +0100 (CET) Jan Krajdl napsal(a): > On Tue, 2007-12-25 at 19:50 +0100, Stepan Roh wrote: > > Zdravim. > > > > Shanim v tento svatecni cas nejakou "zivou" distribuci Linuxu na > > USB, ktera dokaze co nejrychleji nastartovat. Zkusil jsem uz kde > > co, ale stale tomu neco chybi. V podstate jedine, co od toho cekam > > je, ze si to pres DHCP vyzada adresu, nahodi Xy a v nich prohlizec > > a to je vsechno. Je mi jasne, ze si to mohu vytvorit sam, ale rad > > bych neco existujiciho. Diky predem za rady. > > Já jsem na flashku narval plnej archlinux :) Sice to neni uplně live, > ale zase jsem tam mohl nacpat, co jsem chtěl... pro malé mučení > flashky potom možno nechat vytvořit ramdisk, do něj /var a / nechat > jako ro... jinak z těch live jsem zkoušel třeba phlak linux - ten je > na instalaci jednoduchý a mělo by to splňovat to, co si přeješ.. > > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From stepan na srnet.cz Wed Dec 26 20:36:23 2007 From: stepan na srnet.cz (Stepan Roh) Date: Wed, 26 Dec 2007 20:36:23 +0100 (CET) Subject: Linux live distribuce na USB s rychlym startem In-Reply-To: <1198610474.7088.1.camel@localhost> References: <1198610474.7088.1.camel@localhost> Message-ID: Zdravim. On Tue, 25 Dec 2007, Jan Krajdl wrote: > jinak z těch live jsem zkoušel třeba phlak linux - ten je na instalaci > jednoduchý a mělo by to splňovat to, co si přeješ.. Vypada to, ze Phlak je mrtvy (a to naprosto, ani web uz nema). Ale diky za snahu :-) S pozdravem, Stepan Roh From dobes na tes.eu Wed Dec 26 21:21:20 2007 From: dobes na tes.eu (Michal Dobes) Date: Wed, 26 Dec 2007 21:21:20 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071223143153.GA9563@panelnet.cz> References: <20071223143153.GA9563@panelnet.cz> Message-ID: <4772B7C0.60004@tes.eu> Dalibor Straka napsal(a): > mam vanocni problemek: Na spouste serveru jedne firmy mam ruzne sluzby, > pro ktere jsme casem generoval certifikaty (ssl weby, smtps, openvpn > a dalsi). Kazdy s jinymi parametry. Premyslel jsem, ze sjednotim vsechny > certifikaty, vytvorim si vlastni CA a vytvorim nejaky skript nebo papir > pro generovani novych certifikatu. Jde to takhle jednoduse vse sjednotit > pod jednu strechu? Precetl jsem par howto, ktere se vzdy tykalo > konkretni sluzby. Nevite o nejakem obecnem povidani a hlavne prikladu > reseni modelove situace sjednocovani certifikatu? Samozrejme je rada cest jak na to. Jednou y nich je to delat pomoci openssl baliku. Primo jeho soucasti je skript jmenem CA, ktery umi realiyovat jendoduchou certifikacni autoritu (skripty dodavane s openvpn v podstate z toho vychazeji). Dalsi moznosti je pouzit treba aplikaci XCA, ktera je ve verzi pro Windows i linux a realizuje certifikacni autoritu pro priznivce klikacich aplikaci. Umi ale pouzivat i preddefinovane sablony pro ruzne situace, takze toho klikani neni moc. Navic tento programek z tech nejruzneji zkousenych umoznoval realizovat asi nejuplneji s plnou moznosti nastavovani parametru do certifikatu. S openssl to jde take, ale je to mnohem vetsi fuska. Budu-li chtit to mit opravdu dukladne, tak z openca projektu to chce vzit aspon OCSP server, ten vestaveny v openssl prikazu je opravdu jen funkcni demo. Mam-li pobliz Windows 2K a vyse server, tak se da slusne rozjet CA i na tom, je soucasti serveru. :-) Jinak vrele doporucuji procist knihu "Velky pruvodce infrastrukturou PKI", aby clovek ziskal alespon nejaky nahled na to, jak to ma zhruba fungovat a jak postupovat. M. From spm na hellmachine.klfree.net Wed Dec 26 23:06:20 2007 From: spm na hellmachine.klfree.net (Jan Krajdl) Date: Wed, 26 Dec 2007 23:06:20 +0100 Subject: Linux live distribuce na USB s rychlym startem In-Reply-To: References: <1198610474.7088.1.camel@localhost> Message-ID: <1198706780.5267.0.camel@localhost> To jsem si taky všim, ale tu image z něj bych ještě někde vyhrabal, pokud má někdo zájem :) Stepan Roh píše v St 26. 12. 2007 v 20:36 +0100: > Zdravim. > > On Tue, 25 Dec 2007, Jan Krajdl wrote: > > > jinak z těch live jsem zkoušel třeba phlak linux - ten je na instalaci > > jednoduchý a mělo by to splňovat to, co si přeješ.. > > Vypada to, ze Phlak je mrtvy (a to naprosto, ani web uz nema). Ale diky za > snahu :-) > > S pozdravem, > > Stepan Roh -- SPM From totojepast na razdva.cz Thu Dec 27 13:04:41 2007 From: totojepast na razdva.cz (totojepast) Date: Thu, 27 Dec 2007 13:04:41 +0100 Subject: Prosba o spolupraci pri testu nolistingu References: <36498$4771217f$3e184689$11208@news.chello.cz> Message-ID: <906f9$47739bde$3e184689$32671@news.chello.cz> >> http://nolisting.org/, http://en.wikipedia.org/wiki/Nolisting, >> http://www.abclinuxu.cz/zpravicky/nolisting-dalsi-technika-boje-proti-spamu) > Tak jsem si to cetl a nejak se mi ten system vubec nelibi. Pisou tam, ze > pokud prisel mail ze sekundarniho MX a pritom primarni je dostupny, tak ze > to je spam. Nejsem zadny guru, ale co jsem tak mluvil s lidmi okolo mail > serveru, tak pokud vypadne primarni MX, jeho praci prevezme sekundarni, > ovsem ten pracuje podle nejakeho RFC o hodne pomaleji. No a kdyz ten > hlavni naskoci, tak ten sekundarni porad jeste dorucuje zpravy co se mu > mezi tim nashromazdily. Tedy slysel jsem to, ze misto aby to poslal tomu > primarnimu, tak to dorucuje sam. Udajne to tak nekdo ma nastavene. No a > hodne lidi nema sekundarni MX vubec. Treba zrovna ja. Vzdyt i pri nolistingu bezi pouze jeden MX! Jde o to, ze civilizovany odesilajici server zkousi nejprve dorucit postu na primarni MX a kdyz se mu to nedari, zkusi sekundarni MX. Velka cast spamu je vsak odesilana pres jednoucelove, spatne napsane spamovaci programky ("spamboty"). Je zajimave, ze velka cast spambotu zkousi odeslat spam *POUZE* na primarni nebo sekundarni MX. Nolisting funguje tak, ze postu prijima pouze server, ktery figuruje jako sekundarni MX. Civilizovany odesilajici server se tak pokusi nejprve spojit se serverem dle primarniho MX zaznamu, to se mu nepodari. Pak zkusi sekundarni MX, ten postu prijme. Pokud se spambot pokousi dorucit zpravu jen na primarni MX, ma smulu. Pokud se pokousi dorucit zpravu jen na sekundarni MX zaznam, uspeje -- stejne, jako by uspel, kdyby pro domenu byl k dispozici jen jeden MX nebo by fungoval primarni i sekundarni MX. From sumix na styxx.cz Thu Dec 27 18:22:07 2007 From: sumix na styxx.cz (Jiri Kortus) Date: Thu, 27 Dec 2007 09:22:07 -0800 (PST) Subject: Linux live distribuce na USB s rychlym startem References: Message-ID: <077fad31-0ac4-40c7-b31b-2908d3681222@q77g2000hsh.googlegroups.com> Zdravim, a SLAX jste zkousel? Ja s nim mam velmi dobre zkusenosti, i instalace na USB flashdisk byla bez problemu (a jeste k tomu na FAT32, takze obsah disku je viditelny i z windows)... akorat sam nestartuje Xka a v nich prohlizec :-D, ale to by se dalo zmenit. From slavek.banko na axis.cz Thu Dec 27 21:08:27 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Thu, 27 Dec 2007 21:08:27 +0100 Subject: problem s apt-get In-Reply-To: <476E7A33.9020800@seznam.cz> References: <476841E7.4050700@seznam.cz> <200712230006.29680.slavek.banko@axis.cz> <476E7A33.9020800@seznam.cz> Message-ID: <200712272108.29687.slavek.banko@axis.cz> Ha, až teď jsem si toho všiml! Vy mimo perlu v distribuci máte ještě najakou další instalaci perlu v /usr/local/... A problém je právě s tímto "druhým" perlem. Zjistěte tedy, co tam vlastně dělá, a zda tam vůbec má být. Podle toho jej pak buď aktualizujte, nebo zrušte. Slávek -- Dne neděle 23 prosinec 2007 16:09 Cramer napsal(a): > Errno architecture (i486-linux-gnu-thread-multi-2.6.10) does not match > executable architecture (i486-linux-gnu-thread-multi-2.6.15.7) at > /usr/local/share/perl/5.8.7/Errno.pm line 11. > Compilation failed in require at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > BEGIN failed--compilation aborted at > /usr/local/share/perl/5.8.7/File/Temp.pm line 144. > Compilation failed in require at /usr/bin/debsums line 11. > BEGIN failed--compilation aborted at /usr/bin/debsums line 11. From stepan na srnet.cz Thu Dec 27 23:33:46 2007 From: stepan na srnet.cz (Stepan Roh) Date: Thu, 27 Dec 2007 23:33:46 +0100 (CET) Subject: Linux live distribuce na USB s rychlym startem In-Reply-To: <1198706780.5267.0.camel@localhost> References: <1198610474.7088.1.camel@localhost> <1198706780.5267.0.camel@localhost> Message-ID: Zdravim. On Wed, 26 Dec 2007, Jan Krajdl wrote: > Stepan Roh píše v St 26. 12. 2007 v 20:36 +0100: >> >> Vypada to, ze Phlak je mrtvy (a to naprosto, ani web uz nema). Ale diky za >> snahu :-) > > To jsem si taky všim, ale tu image z něj bych ještě někde vyhrabal, > pokud má někdo zájem :) No asi si to nakonec nejak splacam sam, mam tu na USB firewall zalozeny na Slacku, tak do nej pridam Xy a budu editovat startovaci skripty az k uplnemu urychleni. S pozdravem, Stepan Roh From peak na argo.troja.mff.cuni.cz Thu Dec 27 16:41:53 2007 From: peak na argo.troja.mff.cuni.cz (Pavel Kankovsky) Date: Thu, 27 Dec 2007 16:41:53 +0100 (CET) Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071224014303.GA13971@panelnet.cz> Message-ID: <20071227161416.841.0@paddy.troja.mff.cuni.cz> On Mon, 24 Dec 2007, Dalibor Straka wrote: > Napriklad by se mi libilo generovat si klice na jednotlivych strojich, > pak vygenerovat zadost o podpis, tu poslat nejakemu serveru, ten ji > podepise, ale aby k tomu nepotreboval ca.key, ale jen nejaky > master-server-podepisovaci-certifikat. Jak slyším frázi "podepisovat certifikátem" nebo něco podobného, tak sahám po nabité pistoli. ;) Mohl byste udělat to, že budete mít kořenovou CA, jejíž privátní klíč bude většinou někde v trezoru, která své pravomoce deleguje na podřízenou CA, která bude vydávat certifikáty pro koncové subjekty -- a svůj privátní klíč bude mít někde víc po ruce. Význam to může mít ten, že delegace může být omezena např. na jména určitého tvaru (což se ale moc nepoužívá), nebo ten, že při kompromitaci privátního klíče podřízené CA v principu stačí revokovat a nahradit jí vydané certifikáty i její vlastní certifikát, a nemuselo by být potřeba všude vyměňovat kořenový certifikát (což ale stojí na poněkud optimistickém předpokladu, že všichni kontrolují revokační seznamy). Otázka je, jak moc velký provoz budete mít, jestli to má vůbec smysl takto komplikovat. --Pavel Kankovsky aka Peak [ Boycott Microsoft--http://www.vcnet.com/bms ] "Resistance is futile. Open your source code and prepare for assimilation." From dast na panelnet.cz Fri Dec 28 03:07:48 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Fri, 28 Dec 2007 03:07:48 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071227161416.841.0@paddy.troja.mff.cuni.cz> References: <20071224014303.GA13971@panelnet.cz> <20071227161416.841.0@paddy.troja.mff.cuni.cz> Message-ID: <20071228020747.GA18412@panelnet.cz> On Thu, Dec 27, 2007 at 04:41:53PM +0100, Pavel Kankovsky wrote: > On Mon, 24 Dec 2007, Dalibor Straka wrote: > > > Napriklad by se mi libilo generovat si klice na jednotlivych strojich, > > pak vygenerovat zadost o podpis, tu poslat nejakemu serveru, ten ji > > podepise, ale aby k tomu nepotreboval ca.key, ale jen nejaky > > master-server-podepisovaci-certifikat. > > Jak slyším frázi "podepisovat certifikátem" nebo něco podobného, tak sahám > po nabité pistoli. ;) > Staci verbalni upozorneni ;-). Bud si anglicky text spatne prekladam, nebo je to pomerne casty jev. Koukal jsem treba na http://openvpn.net/howto.html#pki: The server will only accept clients whose certificates were signed by the master CA certificate (which we will generate below). Dokonce se mi zda, ze umyslne zamenuji slova certifikat a klic: ...a separate certificate (also known as a public key)... ...The server only needs its own certificate/key... Nejaky hint? -- Dalibor Straka From Jan na houstek.net Fri Dec 28 12:22:51 2007 From: Jan na houstek.net (Jan Houstek) Date: Fri, 28 Dec 2007 12:22:51 +0100 (CET) Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071228020747.GA18412@panelnet.cz> References: <20071224014303.GA13971@panelnet.cz> <20071227161416.841.0@paddy.troja.mff.cuni.cz> <20071228020747.GA18412@panelnet.cz> Message-ID: On Fri, 28 Dec 2007, Dalibor Straka wrote: >> Jak slyším frázi "podepisovat certifikátem" nebo něco podobného, tak >> sahám po nabité pistoli. ;) >> > Staci verbalni upozorneni ;-). > > Bud si anglicky text spatne prekladam, nebo je to pomerne casty jev. > Koukal jsem treba na http://openvpn.net/howto.html#pki: > The server will only accept clients whose certificates were signed by > the master CA certificate (which we will generate below). > > Dokonce se mi zda, ze umyslne zamenuji slova certifikat a klic: > ...a separate certificate (also known as a public key)... > ...The server only needs its own certificate/key... > > Nejaky hint? Certifikat spojuje identitu s verejnym klicem. Obsahuje tedy nejaky verejny klic, udaje o vlastnikovi toho klice a pripadne dalsi informace a podpis. Podpis je hash verejneho klice+identity zasifrovany asymetrickou sifrou s vyuzitim privatniho klice toho, kdo certifikat vydal (tj. bud nejake CA, nebo primo privatnim klicem patricim k tomu verejnemu, pak jde o self-signed certifikat). K podpisu cehokoliv je potreba privatni klic a jelikoz certifikat privatni klic neobsahuje, je blbost neco "podepisovat certifikatem". Ve skutecnosti je tim nejspis mysleno podepsat privatnim klicem, jehoz verejna forma je v certifikatu, kterym se "podepisuje". -- HH From lists.subscriber na pragl.cz Fri Dec 28 13:32:38 2007 From: lists.subscriber na pragl.cz (Miroslav Pragl) Date: Fri, 28 Dec 2007 13:32:38 +0100 Subject: FC8, ipwireless_cs, NetworkManager, system-config-network Message-ID: <00f701c8494d$bbfae2b0$e2f31859@mireknb> Ahoj, je zde nejaky kolega s nainstalovanou FC8 a idealne i ipwireless_cs? narazil jsem na nekolik problemu ktere bych rad prodiskutoval nez je budu eskalovat: - mam ruzovou t-mobile 4g pcmcia bestii. jikosuv (diky!) modul funguje bez problemu az na to ze shazuje system-config-network na podivnou chybu v kudzu. - v predchozi distribuci umel NetworkManager vytocit dialup pripojeni. ted mi nabizi jen wired, wireless a VPN, dialup nikoliv :( - pitom to bylo pohodlne MP From spm na hellmachine.klfree.net Fri Dec 28 17:15:02 2007 From: spm na hellmachine.klfree.net (Jan Krajdl) Date: Fri, 28 Dec 2007 17:15:02 +0100 Subject: OpenVPN a =?ISO-8859-1?Q?routov=E1n=ED?= Message-ID: <1198858502.25245.2.camel@localhost> Zdravim. Rozběh jsem si OpenVPN v modu server. Prakticky to funguje tedy tak, že server má adresu 192.168.168.1 a klienti dostávají 192.168.168.10-20, s tím, že jinak to má /24 subet... Připojím k tomu dva klienty, z obou klientů si pingnu na server, ze serveru pingnu na oba klienty, ale už se mi nepodaří pingnout z klienta na klienta... snažil jsem se hledat, zkoušet, ale nikam to nevedlo :( napadá někoho, čím to vyřešit? Předem díky, Jan Krajdl From slavek.banko na axis.cz Fri Dec 28 17:26:27 2007 From: slavek.banko na axis.cz (=?iso-8859-2?q?Sl=E1vek_Banko?=) Date: Fri, 28 Dec 2007 17:26:27 +0100 Subject: OpenVPN a =?iso-8859-2?q?routov=E1n=ED?= In-Reply-To: <1198858502.25245.2.camel@localhost> References: <1198858502.25245.2.camel@localhost> Message-ID: <200712281726.29670.slavek.banko@axis.cz> Dne pátek 28 prosinec 2007 17:15 Jan Krajdl napsal(a): > Zdravim. > Rozběh jsem si OpenVPN v modu server. Prakticky to funguje tedy tak, že > server má adresu 192.168.168.1 a klienti dostávají 192.168.168.10-20, s > tím, že jinak to má /24 subet... Připojím k tomu dva klienty, z obou > klientů si pingnu na server, ze serveru pingnu na oba klienty, ale už > se mi nepodaří pingnout z klienta na klienta... snažil jsem se hledat, > zkoušet, ale nikam to nevedlo :( napadá někoho, čím to vyřešit? > > Předem díky, > Jan Krajdl > V "server.conf" hledejte "client-to-client". Slávek From petr.klima na sobriety.cz Fri Dec 28 17:29:36 2007 From: petr.klima na sobriety.cz (=?ISO-8859-2?Q?Petr_Kl=EDma?=) Date: Fri, 28 Dec 2007 17:29:36 +0100 Subject: OpenVPN a =?ISO-8859-2?Q?routov=E1n=ED?= In-Reply-To: <1198858502.25245.2.camel@localhost> References: <1198858502.25245.2.camel@localhost> Message-ID: <47752470.4080305@sobriety.cz> OpenVPN standardne nepovoluje komunikaci klientu, musite pridad volbu client-to-client Petr -- Petr Klíma Vývojář, správce sítě Sobriety s.r.o. e-mail: petr.klima na sobriety.cz From dast na panelnet.cz Fri Dec 28 18:02:45 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Fri, 28 Dec 2007 18:02:45 +0100 Subject: OpenVPN a =?iso-8859-2?B?cm91dG924W7t?= In-Reply-To: <1198858502.25245.2.camel@localhost> References: <1198858502.25245.2.camel@localhost> Message-ID: <20071228170245.GA26360@panelnet.cz> On Fri, Dec 28, 2007 at 05:15:02PM +0100, Jan Krajdl wrote: > Zdravim. > Rozběh jsem si OpenVPN v modu server. Prakticky to funguje tedy tak, že > server má adresu 192.168.168.1 a klienti dostávají 192.168.168.10-20, s > tím, že jinak to má /24 subet... Připojím k tomu dva klienty, z obou > klientů si pingnu na server, ze serveru pingnu na oba klienty, ale už se > mi nepodaří pingnout z klienta na klienta... snažil jsem se hledat, > zkoušet, ale nikam to nevedlo :( napadá někoho, čím to vyřešit? > Nedavno se to tu resilo. V archivu jste hledal? (Konkretne tazatelem byl Martin Havlicek.) -- Dalibor Straka From spm na hellmachine.klfree.net Fri Dec 28 18:07:21 2007 From: spm na hellmachine.klfree.net (Jan Krajdl) Date: Fri, 28 Dec 2007 18:07:21 +0100 Subject: OpenVPN a =?ISO-8859-1?Q?routov=E1n=ED?= In-Reply-To: <200712281726.29670.slavek.banko@axis.cz> References: <1198858502.25245.2.camel@localhost> <200712281726.29670.slavek.banko@axis.cz> Message-ID: <1198861641.25245.4.camel@localhost> Funguje, budu se mlátit manuálem do hlavy... díky moc všem :) On Fri, 2007-12-28 at 17:26 +0100, Slávek Banko wrote: > Dne pátek 28 prosinec 2007 17:15 Jan Krajdl napsal(a): > > Zdravim. > > Rozběh jsem si OpenVPN v modu server. Prakticky to funguje tedy tak, že > > server má adresu 192.168.168.1 a klienti dostávají 192.168.168.10-20, s > > tím, že jinak to má /24 subet... Připojím k tomu dva klienty, z obou > > klientů si pingnu na server, ze serveru pingnu na oba klienty, ale už > > se mi nepodaří pingnout z klienta na klienta... snažil jsem se hledat, > > zkoušet, ale nikam to nevedlo :( napadá někoho, čím to vyřešit? > > > > Předem díky, > > Jan Krajdl > > > > V "server.conf" hledejte "client-to-client". > > Slávek > _______________________________________________ > Linux mailing list > Linux na linux.cz > http://www.linux.cz/mailman/listinfo/linux From simon na Cesa.cz Fri Dec 28 17:35:42 2007 From: simon na Cesa.cz (Simon Brandejs) Date: Fri, 28 Dec 2007 17:35:42 +0100 Subject: OpenVPN a =?UTF-8?B?cm91dG92w6Fuw60=?= In-Reply-To: <1198858502.25245.2.camel@localhost> References: <1198858502.25245.2.camel@localhost> Message-ID: <20071228173542.2ce41a4e@Z-Deck> On Fri, 28 Dec 2007 17:15:02 +0100 (CET) Jan Krajdl wrote: > Zdravim. > Rozběh jsem si OpenVPN v modu server. Prakticky to funguje tedy tak, > že server má adresu 192.168.168.1 a klienti dostávají > 192.168.168.10-20, s tím, že jinak to má /24 subet... Připojím k tomu > dva klienty, z obou klientů si pingnu na server, ze serveru pingnu na > oba klienty, ale už se mi nepodaří pingnout z klienta na klienta... > snažil jsem se hledat, zkoušet, ale nikam to nevedlo :( napadá > někoho, čím to vyřešit? cat /proc/sys/net/ipv4/conf/all/forwarding je jedna nebo nula ? ---------0----------------------------------------------- pokud nula tak mate vypnutej ipv4 forwarding echo "1" > /proc/sys/net/ipv4/conf/all/forwarding pomohlo ? tak hledejte neco jako /etc/sysctl.conf a net.ipv4.conf.default.forwarding=1 at to prezije restart ... ---------1----------------------------------------------- nevim .. neco jineho ? iptables jsou ? ? jenom pokus o radu .... simon From PaJaSoft na FoNet.Cz Fri Dec 28 20:56:58 2007 From: PaJaSoft na FoNet.Cz (=?iso-8859-2?Q?Ing._Pavel_PaJaSoft_Janou=B9ek?=) Date: Fri, 28 Dec 2007 20:56:58 +0100 Subject: Prosba o spolupraci pri testu nolistingu In-Reply-To: <906f9$47739bde$3e184689$32671@news.chello.cz> Message-ID: <200712281955.lBSJtRY5026581@merlin.fonet.cz> linux-bounces na linux.cz wrote: > Jde o to, ze civilizovany odesilajici server zkousi nejprve > dorucit postu na > primarni MX a kdyz se mu to nedari, zkusi sekundarni MX. A tuto informaci si poznamena a po nejakou dobu se s primarem neobtezuje jste nejak zapomnel dodat... > Velka cast spamu je vsak odesilana pres jednoucelove, spatne napsane > spamovaci programky ("spamboty"). Je zajimave, ze velka cast spambotu > zkousi odeslat spam *POUZE* na primarni nebo sekundarni MX. Ne "nebo", ale velka cast spamu jde ZAMERNE přes zalozni MXka, protože se (celkem opravnene) predpoklada nizsi mira spoluprace s datovym ulozistem (napr. často není nic znamo třeba o akceptovatelnych e-mail adresach, ale pouze domenach), nizsi mira zabezpeceni, nizsi intenzita spravy atd... > Pokud se spambot pokousi dorucit zpravu jen na primarni MX, > ma smulu. Pokud > se pokousi dorucit zpravu jen na sekundarni MX zaznam, uspeje -- > stejne, jako by uspel, kdyby pro domenu byl k dispozici jen jeden MX > nebo by fungoval primarni i sekundarni MX. Coz je valna vetsina sofistikovanejsiho spamu, na triviality staci třeba SpamAssassin v default nalozi a je to systém, který funguje spolehlive i proti tem neslusnym... ------------------------------------------------------------------- Ing. Pavel Janousek (PaJaSoft) FoNet, spol. s r. o. Technicka podpora, Intranet/Internet Za Kovárnou 1, 625 00 Brno E-mail: mailto:Janousek na FoNet.Cz Tel.: +420 5 4324 4749 WWW: http://WWW.FoNet.Cz/ E-mail: mailto:Info na FoNet.Cz ------------------------------------------------------------------- From dast na panelnet.cz Sun Dec 30 00:06:25 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Sun, 30 Dec 2007 00:06:25 +0100 Subject: Streamovani dvb-t (+multicast) Message-ID: <20071229230625.GA5922@panelnet.cz> Ahoj, pouzivam ke streamovani vlc. Vse funguje, prijimam opet klientem s vlc pres http. - vlc mi zere dost procesoru - obcas sezere par giga ram a masina se uswapuje k oom-killer - vlc je pomerne slozity komplexni program, ktery umi milion veci, ktere nepotrebuji a hure se mi pouziva (obrovska dokumentace, neprehledna konfigurace, neprehledne zdrojaky) - c++ (jak ja ho nenavidim), chtel jsem si vypreparovat jen relevantni kody pro prijem a prebaleni do streamu - vls neni dale vyvyjen a jeho fce prebira vlc Shanim program idealne v C, ktery dokaze precist a prebalit mpeg2 frame z multiplexu do jednotlivych udp/tcp streamu? Klientem bych si opet predstavoval vlc/mplayer apod. Nepotrebuji nic prekodovavat. Dejte vedet i jestli pouzivate ve velke siti ke streamovani vlc s multicastem. Diky, -- Dalibor Straka From dast na panelnet.cz Sun Dec 30 00:25:59 2007 From: dast na panelnet.cz (Dalibor Straka) Date: Sun, 30 Dec 2007 00:25:59 +0100 Subject: Streamovani dvb-t (+multicast) In-Reply-To: <20071229230625.GA5922@panelnet.cz> References: <20071229230625.GA5922@panelnet.cz> Message-ID: <20071229232559.GA6069@panelnet.cz> Nevim jak se mi to mohlo stat ;-(, posilam patch. -- Dalibor Straka --- a 2007-12-30 00:24:13.000000000 +0100 +++ b 2007-12-30 00:24:06.000000000 +0100 @@ -11,7 +11,7 @@ -- vls neni dale vyvyjen a jeho fce prebira vlc +- vls neni dale vyvijen a jeho fce prebira vlc From tomi na nomi.cz Sun Dec 30 00:27:22 2007 From: tomi na nomi.cz (=?iso-8859-2?Q?Tom=E1=B9_Janou=B9ek?=) Date: Sun, 30 Dec 2007 00:27:22 +0100 Subject: Streamovani dvb-t (+multicast) In-Reply-To: <20071229230625.GA5922@panelnet.cz> References: <20071229230625.GA5922@panelnet.cz> Message-ID: <20071229232722.GA1014@nomi.cz> Zdravím, On Sun, Dec 30, 2007 at 12:06:25AM +0100, Dalibor Straka wrote: > - vlc mi zere dost procesoru > - obcas sezere par giga ram a masina se uswapuje k oom-killer > [...] Snad by mohlo pomoct tohle: http://silicon-verl.de/home/flo/projects/streaming/ -- Tomáš Janoušek, a.k.a. Liskni_si, http://work.lisk.in/ From dobes na tes.eu Sun Dec 30 16:35:22 2007 From: dobes na tes.eu (Michal Dobes) Date: Sun, 30 Dec 2007 16:35:22 +0100 Subject: Certifikaty pro ruzne sluzby a vlastni CA In-Reply-To: <20071227161416.841.0@paddy.troja.mff.cuni.cz> References: <20071227161416.841.0@paddy.troja.mff.cuni.cz> Message-ID: <4777BABA.7060602@tes.eu> Pavel Kankovsky napsal(a): > > Mohl byste udělat to, že budete mít kořenovou CA, jejíž privátní klíč bude > většinou někde v trezoru, která své pravomoce deleguje na podřízenou CA, > která bude vydávat certifikáty pro koncové subjekty -- a svůj privátní > klíč bude mít někde víc po ruce. Vybudovat si hierarchickou strukturu CA je dobrý postup. Jenom je to občas kanón na vrabce v případě, že všechny CA bude obsluhovat jedna osoba pro firmu o pěti lidech, ale i tak to má svá pozitiva pro oddělení rolí a některé bezpečnostní prvky. Akorát, pokud jsem postřehl správně, tu tazatel mával i OpenVPN, a to je zrovna jedna z aplikací, která se nemá s hierarchickou strukturou moc ráda, nefungují pak korektně CRL, bere se v potaz jen ten koncový, čímž to dost ztrácí kouzlo. Sice má OpenVPN nějakou dobu už v TODO, že s tím něco udělají, ale zatím se tak nestalo. :-( M. From _pm na post.cz Sun Dec 30 21:18:46 2007 From: _pm na post.cz (PM) Date: Sun, 30 Dec 2007 21:18:46 +0100 Subject: ogg - 6 kanalu a stereokarta Message-ID: <4777FD26.60500@post.cz> Zdravím konferenci. Mám problém se zvukovými soubory vorbis (*.ogg). Dostal jsem 6-kanálový *.ogg. Pokus o jeho přehrání skončí zaseknutím ogg123 hned na začátku - nutno odstřelit killem. Příčinou bude zřejmě špatná spolupráce s mojí pouze stereozvukovkou. Přehrávání 2-kanálových *.ogg je bez problémů. Mám starší zvukovku ovládanou oss. Moje otázky: 1) Lze nějak ogg123 přinutit, aby do zvukovky posílal max. 2 kanály? Nepodařilo se mi nic najít, parametry jako "--channels" apod. nezná. 2) Lze nějak přinutit oggenc, aby ze vstupního vícekanálového zvukového souboru vytvořil pouze stereo *.ogg? Pokud někdo víte a poradíte, budu rád. Petr From tomasek na etf.cuni.cz Mon Dec 31 09:22:09 2007 From: tomasek na etf.cuni.cz (Petr Tomasek) Date: Mon, 31 Dec 2007 09:22:09 +0100 Subject: ogg - 6 kanalu a stereokarta In-Reply-To: <4777FD26.60500@post.cz> References: <4777FD26.60500@post.cz> Message-ID: <20071231082209.GA32488@ebed.etf.cuni.cz> On Sun, Dec 30, 2007 at 09:18:46PM +0100, PM wrote: > Zdravím konferenci. > > Mám problém se zvukovými soubory vorbis (*.ogg). Dostal jsem 6-kanálový > *.ogg. Pokus o jeho přehrání skončí zaseknutím ogg123 hned na začátku - > nutno odstřelit killem. Příčinou bude zřejmě špatná spolupráce s mojí > pouze stereozvukovkou. Přehrávání 2-kanálových *.ogg je bez problémů. A je to skutecne 6-ti kanalovy zvuk, nebo je ogg kodovan pres Ambisonic? P.T. -- Petr Tomasek Jabber: butrus na jabbim.cz SIP: butrus na ekiga.net From _pm na post.cz Mon Dec 31 12:42:30 2007 From: _pm na post.cz (PM) Date: Mon, 31 Dec 2007 12:42:30 +0100 Subject: ogg - 6 kanalu a stereokarta In-Reply-To: <20071231082209.GA32488@ebed.etf.cuni.cz> References: <4777FD26.60500@post.cz> <20071231082209.GA32488@ebed.etf.cuni.cz> Message-ID: <4778D5A6.5010203@post.cz> Petr Tomasek wrote: >> Mám problém se zvukovými soubory vorbis (*.ogg). Dostal jsem 6-kanálový >> *.ogg. Pokus o jeho přehrání skončí zaseknutím ogg123 hned na začátku - >> nutno odstřelit killem. Příčinou bude zřejmě špatná spolupráce s mojí >> pouze stereozvukovkou. Přehrávání 2-kanálových *.ogg je bez problémů. > > A je to skutecne 6-ti kanalovy zvuk, nebo je ogg kodovan pres Ambisonic? Soubor byl vytvořen pomocí oggenc, ogginfo o něm píše: --- New logical stream (#1, serial: 4232759f): type vorbis Vorbis headers parsed for stream 1, information follows... Version: 0 Vendor: Xiph.Org libVorbis I 20050304 Channels: 6 Rate: 44100 --- tak snad 6-kanálový je. U obyčejných stereo je "Channels: 2". Petr From chysky na NO_SPAM_svtpisek.cz Fri Dec 28 09:58:23 2007 From: chysky na NO_SPAM_svtpisek.cz (=?ISO-8859-2?Q?Pavel_Chysk=FD?=) Date: Fri, 28 Dec 2007 09:58:23 +0100 Subject: OT: Prosba o spolupraci pri testu nolistingu In-Reply-To: <36498$4771217f$3e184689$11208@news.chello.cz> References: <36498$4771217f$3e184689$11208@news.chello.cz> Message-ID: Tak nevim, jestli tohle neni novy zpusob ziskavani emailovych adres do spamerovy databaze (viz odesilatel: totojepast), ale chci verit ze ne a zkusebni maily jsem odeslal. Moc by mne zajimalo vyhodnoceni nolistingu po nejake dobe nasazeni, i kdyz vim, ze z jednoho pripadu nelze delat obecne zavery. Tipoval bych, ze vysledky nebudou prilis vyrazne, z techto duvodu: - velka vetsina spamu, ktery k nam projde, je pres open relay regulerniho MTA - kdyz jsme jeste meli sekundarni MX, tak vetsina spamu od "hloupych" spambotu chodila rovnou na sekundar. To se da vylepsit tim, ze "fake" MX budou dva (na zacatku a na konci) a ten skutecny bude mezi nimi, ale cert vi, co si pak ten robot vybere, jestli druhy nebo posledni. Taky pak potrebuju ne jeden, ale dva stroje s verejnou IP. - hloupy spambot obvykle nema reverzni DNS, takze pri kontrole na RDNS jich stejne moc neprojde. Faktory, ktere hovori proti nolistingu, jsou stejne jako u greylistingu: - pokud ma nektery "divny", ale korektni serever problemy s greylistingem, bude se mozna stejne spatne vyrovnavat s nolistingem - bude to fungovat jen tehdy, kdyz to nebude tak rozsirene, aby stalo za to naucit spamboty tyhle slaboucke zamecky otevirat. Pavel Chyský totojepast napsal(a): > Testuji ted na jedne domene nolisting, coz je jedna z metod boje proti > spamu pomoci kouzla s MX zaznamy v DNS (vice info na > http://nolisting.org/, http://en.wikipedia.org/wiki/Nolisting, > http://www.abclinuxu.cz/zpravicky/nolisting-dalsi-technika-boje-proti-spamu) > > Potrebuji ale overit, zda nolisting neohrozuje dorucovani legitimnich > zprav. Ruzne "divne" postovni servery (stare verze Novell GroupWise, > exoticke webmaily apod.) mely problemy s greylistingem, chtel bych > proto poprosit o nasledujici: > > Mohli byste poslat prazdnou testovai zpravu zaroven na tyto 2 adresy? > Na jedne z nich je nolisting implementovan, na druhe nikoli: > > xxx na koukat.cz, xxx na ehelp.cz