Re: Exim4 not routing local mail, even after exim4-config (was New 64bit installation: Exim4 Send to Root)

2014-07-28 Thread David Baron
On Sunday 27 July 2014 23:45:44 debian-user-digest-requ...@lists.debian.org 
wrote:
> > >   /etc/mailname
> > 
> > localhost.localdomain
> >
> > 
> >
> > This is the first answer on the reconfig, probably should not be this?
> 
> This is not ok. Exim uses what is in /etc/mailname to qualify an address
> without a domain name. For example, if the mail is sent to david then
> exim cannot let it go out like that so will add localhost.localdomain
> and send it david@localhost.localdomain. smtp.012.net.il will be unable
> to deliver it because localhost.localdomain in not in the DNS. The mail
> should be returned to you.

Thought so. Why was that even offered? I had replaced it previously with the 
proper domain so did so again.

Now, if I simply send to a user, the mail will be delivered.
If I simply send to "root," it gets correctly aliased over to 
"system_notifications," but then gets returned!

So original problem remains !?!


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2338197.LsyDOn3Mkp@dovidhalevi



Re: New 64bit Installation. Root partition too small--what to do?

2014-07-28 Thread David Baron
On Sunday 27 July 2014 23:45:44 debian-user-digest-requ...@lists.debian.org 
wrote:
> > My older 1-terra drive has bad blocks. I can partition around them and use
> > it but one a disk has begun to ... well, maybe best to junk it.
> 
> Wipe and recycle it.
Disk has one region (that I know of) with errors.
I can partition so this region is not used.

Is there some utility to repair it?
Is this sickness like to spread?

> > I have an older
> > 80g IDE will just keeps going and going. / can go there is I cannot
> > achieve
> > any other alternative.
> 
> I have several 80 GB IDE HDD's that I use as system drives/ spares. 
> They have been very reliable.

Temporarily, should do just fine.
Easy to move using lilo :-)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2330516.2jqD1SjIA0@dovidhalevi



Re: android connection

2014-07-28 Thread Johann Spies
Install Airdroid on your Android device and connect to it using your web
browser if you are on the same network segment.

Regards
Johann


Does anyone have mimic-tools1.0.1.deb package?

2014-07-28 Thread Martin T
Hi,

aMSN(free open source MSN Messenger clone) allowed one to store
web-cam sessions, but saved those into cam files. There is an utility
called mimic2rgb which allows one to convert those cam files into RGB
video stream. At some point, there even were some Debian packages
around(mimic-tools1.0.1.deb) which contained the mimic2rgb utility.
However, at nowadays, it seems nearly impossible to find the Debian
package(mimic-tools1.0.1.deb) or the source
tarball(mimictools-1.0.1.tar.gz). Does anyone have an old repo
mirrored somewhere which still has this package? However, I'm not sure
if this package has ever been in any official repository..


regards,
Martin


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAJx5YvHR=b3T_gbFco=ug6_u4b7agvocxru20vrysswl6qt...@mail.gmail.com



90-second timeout during boot -- interaction between systemd and encrypted disk with LVM root/swap/home

2014-07-28 Thread Rick Thomas
In my continuing quest for enough understanding of systemd to be able to 
actually use it in real-life situations, I’ve set up a VM running the latest 
Jessie release.  In the spirit of experimentation, I set it up with root, swap 
and home as LVs on an encrypted PV.  In a real-world situation, I’d have the 
key for the encrypted PV on a USB-stick, so I gave the VM a small (1GB) ext2 
disk with just a key file on it.  The /etc/crypttab file looks like this:

   sda5_crypt UUID=e2bd09e9-9e01-484a-99f7-9a0b5d8a2bc3 
/dev/disk/by-label/KEY:/key luks,keyscript=/lib/cryptsetup/scripts/passdev

It boots all OK except that there is a ~90 second delay while it looks for the 
key file…  Anybody know what’s going on?  And what to do about it?

I have a Wheezy system (without systemd) that has a similar setup.  I don’t get 
this kind of delay there.

The attachment is an excerpt from the systemd journal that shows the behavior.  
The delay and timeout occur between 18:54:10 to 18:55:39.

NOTE: the root and /home filesystems have already been fsck’ed and mount’ed 
*well before* the time-out occurs, so it *is* finding the key file.


Enjoy!
Rick

PS: As always, I’m happy to RTFM — if someone is kind enough to point me at the 
FM.


Jul 27 18:54:09 jessie systemd-journal[253]: Journal started
Jul 27 18:54:09 jessie systemd[1]: Starting Apply Kernel Variables...
Jul 27 18:54:09 jessie systemd[1]: Starting Dispatch Password Requests to 
Console Directory Watch.
Jul 27 18:54:09 jessie systemd[1]: Started Dispatch Password Requests to 
Console Directory Watch.
Jul 27 18:54:09 jessie systemd[1]: Starting Paths.
Jul 27 18:54:09 jessie systemd[1]: Reached target Paths.
Jul 27 18:54:09 jessie systemd[1]: Mounting Debug File System...
Jul 27 18:54:09 jessie systemd[1]: Expecting device 
dev-disk-by\x2duuid-e2bd09e9\x2d9e01\x2d484a\x2d99f7\x2d9a0b5d8a2bc3.device...
Jul 27 18:54:09 jessie systemd[1]: Expecting device 
dev-mapper-sda5_crypt.device...
Jul 27 18:54:09 jessie systemd[1]: Expecting device 
dev-disk-by\x2dlabel-KEY:-key.device...
Jul 27 18:54:09 jessie systemd-modules-load[250]: Inserted module 'fuse'
Jul 27 18:54:09 jessie systemd[1]: Starting Create list of required static 
device nodes for the current kernel...
Jul 27 18:54:09 jessie systemd[1]: Starting File System Check on Root Device...
Jul 27 18:54:09 jessie systemd[1]: Starting udev Kernel Socket.
Jul 27 18:54:09 jessie systemd[1]: Listening on udev Kernel Socket.
Jul 27 18:54:09 jessie systemd[1]: Starting udev Control Socket.
Jul 27 18:54:09 jessie systemd[1]: Listening on udev Control Socket.
Jul 27 18:54:09 jessie systemd[1]: Starting udev Coldplug all Devices...
Jul 27 18:54:09 jessie systemd[1]: Mounting Temporary Directory...
Jul 27 18:54:09 jessie systemd[1]: tmp.mount: Directory /tmp to mount over is 
not empty, mounting anyway.
Jul 27 18:54:09 jessie systemd[1]: Expecting device 
dev-disk-by\x2duuid-6cb9fa29\x2d8ee6\x2d493c\x2d907b\x2de508662f2e1a.device...
Jul 27 18:54:09 jessie systemd[1]: Starting Root Slice.
Jul 27 18:54:09 jessie systemd[1]: Created slice Root Slice.
Jul 27 18:54:09 jessie systemd[1]: Starting User and Session Slice.
Jul 27 18:54:09 jessie systemd[1]: Created slice User and Session Slice.
Jul 27 18:54:09 jessie systemd[1]: Starting System Slice.
Jul 27 18:54:09 jessie systemd[1]: Created slice System Slice.
Jul 27 18:54:09 jessie systemd[1]: Starting system-getty.slice.
Jul 27 18:54:09 jessie systemd[1]: Created slice system-getty.slice.
Jul 27 18:54:09 jessie systemd[1]: Starting Slices.
Jul 27 18:54:09 jessie systemd[1]: Reached target Slices.
Jul 27 18:54:09 jessie systemd[1]: Expecting device 
dev-mapper-jessie\x2d\x2dvg\x2dhome.device...
Jul 27 18:54:09 jessie systemd[1]: Started Load Kernel Modules.
Jul 27 18:54:09 jessie systemd[1]: Mounted Huge Pages File System.
Jul 27 18:54:09 jessie systemd[1]: Mounted POSIX Message Queue File System.
Jul 27 18:54:09 jessie systemd[1]: Started Apply Kernel Variables.
Jul 27 18:54:09 jessie systemd[1]: Mounted Debug File System.
Jul 27 18:54:09 jessie systemd[1]: Started Create list of required static 
device nodes for the current kernel.
Jul 27 18:54:09 jessie systemd[1]: Mounted Temporary Directory.
Jul 27 18:54:09 jessie systemd[1]: Starting Create static device nodes in 
/dev...
Jul 27 18:54:09 jessie systemd[1]: Mounted Configuration File System.
Jul 27 18:54:09 jessie systemd[1]: Mounting FUSE Control File System...
Jul 27 18:54:09 jessie systemd[1]: Started Create static device nodes in /dev.
Jul 27 18:54:09 jessie systemd[1]: Mounted FUSE Control File System.
Jul 27 18:54:09 jessie systemd[1]: Started udev Coldplug all Devices.
Jul 27 18:54:09 jessie systemd[1]: Starting udev Wait for Complete Device 
Initialization...
Jul 27 18:54:09 jessie systemd[1]: Starting udev Kernel Device Manager...
Jul 27 18:54:09 jessie systemd-fsck[264]: ROOT: clean, 111250/273632 files, 
849883/1092608 blocks
Jul 27 18:54:09 jessie systemd[1]: Started udev Kernel Device Manager.
Jul 27 18:54:09 jessi

Re: /var partition seems locked or read only

2014-07-28 Thread berenger . morel



Le 27.07.2014 01:42, PaulNM a écrit :

On 07/25/2014 10:54 AM, berenger.mo...@neutralite.org wrote:

First time I have exhausted inodes, but I never used apt-cacher-ng
previously, and it's quite obvious that a proxy+cache is very greedy 
in

terms of inodes.


Not really. That's like saying the parking lot is greedy in terms of
parking spots, after you just drove a bunch of cars into it. :)


Indeed. I took a stupid shortcut.

Inodes are files/folders, files/folders are inodes. (1-to-1)  
Anything

that has a bunch of files/folders will use a bunch of inodes. Same
number in fact.


Hum... is it accurate?
Files can use more than one inode, with ln. Folders can not, AFAIK, 
since symlinks are simply pointers to inodes (which are themselves 
pointers --with reference counter I guess, std::shared_ptr in c++11?-- 
to data).

I'm simply asking, I might be completely wrong or inaccurate...


The nice thing here is that I have learned a lot of this error, and
maybe someday I'll be able to help someone else in a similar 
situation,

or be able to understand better partition systems.


Learning is good, keep it up. :)  Others have already told you the 
long
term fix (copy data, reformat, copy back), but there's another 
option.


Inodes are a per-filesystem instance thing.  If you can free at least 
1

inode on /var, then you can:
create a file
mkfs.ext4 (or whatever) it,
temporarily loopback mount it somewhere,
move a large folder's (inode-wise) contents into it,
umount it, add it to fstab, then remount.

A bit complicated, but it's something you can do on the live system
without external drives. Technically the loopback mounted file 
doesn't
need to be inside /var, but you have plenty of storage space there, 
so

why not use it.


Very nice way! I did not know that it was possible to "insert" a 
file-system into a file (but, finally, it does makes a lot of sense, 
that's what iso files are finally).

I'll go for that solution.
I won't name it complex, it's simply not a classic procedure. Doing 
things differently rarely stops me.




One of my defects is that I always try to tweak things... (with time
I've learned to not do that when the target is very important) but 
at

least it allows me to learn. By failures :)


Yeah.  Choosing the bigfile option when formating doesn't really save
drive space.  It does simplify the filesystem records a little as 
ther

are fewer records to keep track of.

In fact it can possibly end up using more space if you have a bunch 
of

smaller files.


Yes, this is one of the few things I know about filesystems: I guess 
that those options change the cluster width, which are the real space 
unit when trying to create files. Now, I would never have guessed that 
it also affect the number of inodes...


If you do reformat /var, I wouldn't use xfs. As others have 
mentioned,

it has a few oddities that can cause issues if you're not fully
prepared.  By all means create a sparsefile or regular loopback mount 
to
play around with it, but for important stuff on your system, stick 
with

what you know.


This would mean sticking with FAT32 hehe (since when I was a pure 
newbie to computing, I played a little with winhex --and other reverse 
engineering tools-- to open lot of stuff, including whole hard disks. 
This tool is very nice, and I which I could buy it and use it on my 
current favorite OS. For now I'm using wxhexeditor, quite nice, but the 
author knows that he can't compete with winhex's devs.).
Using Linux is a way for me to learn things, and relying on Debian is 
my way to have some trust that not everything will self-destroy while 
I'm learning to do new things. Or at least that I will be able to repair 
things I've broken, this being my main argument to not use windows 
anymore.


But I'll accept your advice, using ext systems for important data, and 
probably dig into other filesystems.
Taking the default values because I do not know what other means ashame 
me, why would I do that on a system which owe it's strength to choice 
and alternatives? (even the kernel can now be changed in Debian :) so I 
guess we can no longer say that Debian is a Linux distro)



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/80d3bca6e9a775d79e8721c052942...@neutralite.org



Re: In dire need of assistant desperate lively hood involved.

2014-07-28 Thread berenger . morel



Le 28.07.2014 03:35, Stephen Pruitt a écrit :

hi i  have 2 issues i would like your help with i just installed
Debian 7 i whose using microsoft windows 7 and i back up the files on
to a USB and i would like to know how to reinstall the files.i also
tried to install a video game and it would not install when i try to
install i got a could knot auto run message could you please tell me
how to do these things



Hi.

Read this mail if you want to understand your system. Otherwise, wait 
for other replies :)
This procedure require that you know the administrator password, but I 
guess you do, since you spoke about games: it must be your personal 
system then.


Simply plug the device, and take a look into /media. Or in /mnt, I'm 
not sure what is the default behavior (I have a minimalist system, by 
choice).


If not, then open a terminal emulator (you can probably summon it with 
the shortcut ALT-F2, and then write "x-terminal-emulator" in the dialog 
box which appeared. It works with various DEs (desktop environments) but 
I never tried gnome3 (the Debian default one, AFAIK)) and type "su -c 
mount /dev/sdb1 /mnt".


WARNING: I HAVE USED /dev/sdb1 BECAUSE I GUESSED YOU ONLY USE ONE 
HARD-DISK, AND NO SYSTEMD. THIS MAY BE DIFFERENT ON YOUR SYSTEM.


So, to know what your device's name is, you'll need to understand how 
it's built: /dev is a folder with special files which describes your 
hardware.
Files with names starting with "sd" are files which describes SCSI 
disks. The SCSI part is historical, same for disk. Now I would say that 
sdXY files are simply for devices which provides you read and write 
abilities (so, not the CD-roms for example).
The next part of the name, a letter, is the alphabetic number of your 
disk, so, 'a' is for the first disk, 'b' for the second, etc.
The last part of the name, a number, is the partition number. Usually, 
people only have one partition on their USB devices.
So, I guessed you device's name from the fact that its a rw device 
(sd), that you probably only have one hard-disk, so the USB will be the 
2nd peripheral (b) and that it only have one partition so the one you 
want is the first one (1).
You can have less guessed informations if you run the command "dmesg" 
after pluging in your device.


If this still does not work, then you probably need to install some 
drivers (for FAT and NTFS). The packages which provides them are 
"ntfs-3g" and "dosfstools". To install them, use the command "su -c 
apt-get install ntfs-3g dosfstools".


Now, about the game.
To install a Windows game on a different OS, you will need a program 
named wine, and your game may not work perfectly. Check it on their 
official site (http://appdb.winehq.org/). Also, AFAIK, wine does not 
support 64bit programs.
It may be tricky, or simply work out of the box. I'm not used to wine's 
tricks, but to install it you'll need to do the following steps, still 
in a terminal:
_ add the i386 architecture to your system, if you have installed the 
amd64 version of Debian. The command is: "su -c dpkg --add-architecture 
i386", then, "su -c apt-get update".

_ install wine. Command: "su -c apt-get install wine -a i386"


Now, doing any of the commands I have spoke about will alter the 
system. You should read some documentation about them and be sure that 
you understand what they does: for this, in a terminal, use the command 
"man" (for manual). For example: "man su".


Good luck.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/1281bc2ef315907feedd32a4f24ab...@neutralite.org



Re: In dire need of assistant desperate lively hood involved.

2014-07-28 Thread berenger . morel



Le 28.07.2014 11:53, berenger.mo...@neutralite.org a écrit :

Le 28.07.2014 03:35, Stephen Pruitt a écrit :

hi i  have 2 issues i would like your help with i just installed
Debian 7 i whose using microsoft windows 7 and i back up the files 
on

to a USB and i would like to know how to reinstall the files.i also
tried to install a video game and it would not install when i try to
install i got a could knot auto run message could you please tell me
how to do these things



Hi.

Read this mail if you want to understand your system. Otherwise, wait
for other replies :)
This procedure require that you know the administrator password, but
I guess you do, since you spoke about games: it must be your personal
system then.

Simply plug the device, and take a look into /media. Or in /mnt, I'm
not sure what is the default behavior (I have a minimalist system, by
choice).

If not, then open a terminal emulator (you can probably summon it
with the shortcut ALT-F2, and then write "x-terminal-emulator" in the
dialog box which appeared. It works with various DEs (desktop
environments) but I never tried gnome3 (the Debian default one,
AFAIK)) and type "su -c mount /dev/sdb1 /mnt".

WARNING: I HAVE USED /dev/sdb1 BECAUSE I GUESSED YOU ONLY USE ONE
HARD-DISK, AND NO SYSTEMD. THIS MAY BE DIFFERENT ON YOUR SYSTEM.

So, to know what your device's name is, you'll need to understand how
it's built: /dev is a folder with special files which describes your
hardware.
Files with names starting with "sd" are files which describes SCSI
disks. The SCSI part is historical, same for disk. Now I would say
that sdXY files are simply for devices which provides you read and
write abilities (so, not the CD-roms for example).
The next part of the name, a letter, is the alphabetic number of your
disk, so, 'a' is for the first disk, 'b' for the second, etc.
The last part of the name, a number, is the partition number.
Usually, people only have one partition on their USB devices.
So, I guessed you device's name from the fact that its a rw device
(sd), that you probably only have one hard-disk, so the USB will be
the 2nd peripheral (b) and that it only have one partition so the one
you want is the first one (1).
You can have less guessed informations if you run the command "dmesg"
after pluging in your device.

If this still does not work, then you probably need to install some
drivers (for FAT and NTFS). The packages which provides them are
"ntfs-3g" and "dosfstools". To install them, use the command "su -c
apt-get install ntfs-3g dosfstools".

Now, about the game.
To install a Windows game on a different OS, you will need a program
named wine, and your game may not work perfectly. Check it on their
official site (http://appdb.winehq.org/). Also, AFAIK, wine does not
support 64bit programs.
It may be tricky, or simply work out of the box. I'm not used to
wine's tricks, but to install it you'll need to do the following
steps, still in a terminal:
_ add the i386 architecture to your system, if you have installed the
amd64 version of Debian. The command is: "su -c dpkg
--add-architecture i386", then, "su -c apt-get update".
_ install wine. Command: "su -c apt-get install wine -a i386"


Now, doing any of the commands I have spoke about will alter the
system. You should read some documentation about them and be sure 
that

you understand what they does: for this, in a terminal, use the
command "man" (for manual). For example: "man su".

Good luck.


BTW, forgot to give some pointers on useful informations and tips about 
how to write your questions for more help.


About file organization: 
http://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard


And about how to write your questions:
People here are volunteers. We are not paid to reply, we just want to 
help others.
So, you will never have one people dedicated to you (which is what I 
have understood about your title), simply people which will try to help 
at a moment, if they can.
Also, try to take some time to use punctuation, and do some efforts in 
writing. I do not say I master English or that you need to, but this 
list is an international one, and people for which English is not their 
main language (as I) might have hard time to understand you.
For example, the lack of punctuation plus a typo in your first phrase 
made me thinking more than 2 minutes to understand this "hi i  have 2 
issues i would like your help with i just installed Debian 7 i whose 
using microsoft windows 7 and i back up the files on to a USB and i 
would like to know how to reinstall the files."

If you had written it like this:
==
Hi, I  have 2 issues i would like your help with.
I just installed Debian 7. I was using microsoft windows 7 and I back 
up the files on to a USB. I would like to know how to reinstall the 
files.

==
I would have understood immediately. Just splitting the phrase using 
punctuation and line breaks makes it far more understandable. For non 
native Englis

Re: 90-second timeout during boot -- interaction between systemd and encrypted disk with LVM root/swap/home

2014-07-28 Thread Michael Biebl
Am 28.07.2014 10:54, schrieb Rick Thomas:
> In my continuing quest for enough understanding of systemd to be able to 
> actually use it in real-life situations, I’ve set up a VM running the latest 
> Jessie release.  In the spirit of experimentation, I set it up with root, 
> swap and home as LVs on an encrypted PV.  In a real-world situation, I’d have 
> the key for the encrypted PV on a USB-stick, so I gave the VM a small (1GB) 
> ext2 disk with just a key file on it.  The /etc/crypttab file looks like this:
> 
>sda5_crypt UUID=e2bd09e9-9e01-484a-99f7-9a0b5d8a2bc3 
> /dev/disk/by-label/KEY:/key luks,keyscript=/lib/cryptsetup/scripts/passdev


https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618862

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Slavko
Ahoj,

Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
napísal:

> On Sun 27 Jul 2014 at 10:03:29 +0100, Jonathan Dowland wrote:
> 
> > My current best guess is you are attempting to connect to gmail's
> > servers on port 25 and your ISP has blocked connections to port 25
> > for any server except their own, in which case port 587 should work
> > instead.
> 
> He could check with nc.
> 
>   brian@desktop:~$ nc smtp.gmail.com 25
>   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
> 

AFAIK, the port 25 have to used only for (inter-) servers connections,
the clients have connect via 587, the port 25 for client connections is
for backward compatibility only.

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


Re: capitalone banking website compatibility with iceweasel

2014-07-28 Thread Marc Auslander
For what its worth, the site is fine with the latest build of firefox
on debian (the 34a nightly).  What firefox version is iceweasel?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/8738dl4qt7@aptiva.optonline.net



Re: Exim4 not routing local mail, even after exim4-config (was New 64bit installation: Exim4 Send to Root)

2014-07-28 Thread Curt
On 2014-07-28, David Baron  wrote:
>
> Now, if I simply send to a user, the mail will be delivered.
> If I simply send to "root," it gets correctly aliased over to 
> "system_notifications," but then gets returned!

I don't know what "aliased over to system notifications" means, but "the
forwarding of mail for root to the regular user account is configured in
/etc/aliases."

In other words

root: localuser_you_want_to_receive_root's_mail


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltcg40.2l1.cu...@einstein.electron.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Curt
On 2014-07-28, Joel Rees  wrote:
>
> (Piques my curiosity.)
>
>> They have made
>> it clear in that they do not require or use TLS.
>
> (Wondering what TLS has to do with strangeness in this case.)
>

Maybe what mutt has to do with vlc. 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltckhl.2l1.cu...@einstein.electron.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 14:02:29 +0200, Slavko wrote:

> Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
> napísal:
> 
> > He could check with nc.
> > 
> >   brian@desktop:~$ nc smtp.gmail.com 25
> >   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
> > 
> 
> AFAIK, the port 25 have to used only for (inter-) servers connections,
> the clients have connect via 587, the port 25 for client connections is
> for backward compatibility only.

How does the server tell the difference between talking to another
server (which is acting as client) and what you call a "client"?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/28072014145359.36b1c2183...@desktop.copernicus.demon.co.uk



Re: capitalone banking website compatibility with iceweasel

2014-07-28 Thread Lisi Reisz
On Monday 28 July 2014 13:21:24 Marc Auslander wrote:
> For what its worth, the site is fine with the latest build of firefox
> on debian (the 34a nightly).  What firefox version is iceweasel?

31 on Wheezy using backports.  (And it is awful.  I want to change to Firefox, 
which can't be worse, but am afraid of losing my bookmarks, or even worse, 
messing up my system.)

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201407281500.26581.lisi.re...@gmail.com



Re: Exim4 not routing local mail, even after exim4-config (was New 64bit installation: Exim4 Send to Root)

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 10:34:04 +0300, David Baron wrote:

> On Sunday 27 July 2014 23:45:44 debian-user-digest-requ...@lists.debian.org 
> wrote:
> > > >   /etc/mailname
> > > 
> > > localhost.localdomain
> > >
> > > 
> > >
> > > This is the first answer on the reconfig, probably should not be this?
> > 
> > This is not ok. Exim uses what is in /etc/mailname to qualify an address
> > without a domain name. For example, if the mail is sent to david then
> > exim cannot let it go out like that so will add localhost.localdomain
> > and send it david@localhost.localdomain. smtp.012.net.il will be unable
> > to deliver it because localhost.localdomain in not in the DNS. The mail
> > should be returned to you.
> 
> Thought so. Why was that even offered? I had replaced it previously with the 
> proper domain so did so again.

It was offered because your system was set up tell exim what the
mailname was when it asked.

> Now, if I simply send to a user, the mail will be delivered.
> If I simply send to "root," it gets correctly aliased over to 
> "system_notifications," but then gets returned!
> 
> So original problem remains !?!

'exim -bt ' might help.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/28072014145715.2d781cca7...@desktop.copernicus.demon.co.uk



Re: capitalone banking website compatibility with iceweasel

2014-07-28 Thread John Hasler
Lisi writes:
> I want to change [from Iceweasel] to Firefox, which can't be worse...

It can't be any different.
-- 
John Hasler 
jhas...@newsguy.com
Elmwood, WI USA


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87vbqhtvk9@thumper.dhh.gt.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Jerry Stuckle
On 7/28/2014 9:56 AM, Brian wrote:
> On Mon 28 Jul 2014 at 14:02:29 +0200, Slavko wrote:
> 
>> Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
>> napísal:
>>
>>> He could check with nc.
>>>
>>>   brian@desktop:~$ nc smtp.gmail.com 25
>>>   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
>>>
>>
>> AFAIK, the port 25 have to used only for (inter-) servers connections,
>> the clients have connect via 587, the port 25 for client connections is
>> for backward compatibility only.
> 
> How does the server tell the difference between talking to another
> server (which is acting as client) and what you call a "client"?
> 
> 

It doesn't, but operation is quite different.  MTA's typically require
no login on port 25, but only allow messages to be sent to domains it
serves (otherwise it quickly becomes a spam server).  Port 587 requires
a login, but allows messages to be relayed to any domain.

Now, for historic reasons, some MTA's still allow login on port 25
(either directly or some indirect method like accessing a POP or IMAP
account before sending).  But these are becoming fewer and fewer.

BTW, many ISP's have blocked outgoing port 25 connections (especially on
residential accounts) because there are a lot of trojans out there which
will install a minimal MTA on a user's machine, unbeknownst to the user.
 This allows spammers to use the compromised machine to be a spam
source, hiding the real source of the spam.

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d65f5b.1070...@attglobal.net



Automatic upgrades stalls on the last kernel release

2014-07-28 Thread Paul Lewis

I seem to have a problem with automatic updates on my system. The AU 
system has been unable to function normally for some time and I now 
have something like 61 updates waiting in the queue.


When I try to process the updates, it seems to choke on the Linux 3.2 
for 64 bit PCs entry,  which is linux-image-3.2.0-4-amd64-3.2.60-1
+deb7u1 (64bit)

reported as 23.4MBs.

The error is "Failed to process request." and more details are 
-

'cannot copy extracted data for '.lib/modules/3.2.0-4amd64/kernel/
drivers/net/wireless/rt2x00/rt61pci.ko' to '/lib/modules/3.2.0-4-amd64/
kernel/drivers/net/wireless/rt2x00/rt61pci.ko.dpkg-new'.

If I manually copy the file and rerun the update, it just produces a 
similar error message with a different file name.

df returns the following;
test:# df
Filesystem 1K-blocksUsed Available Use% Mounted on
rootfs329233  270345 41890  87% /
udev   10240   0 10240   0% /dev
tmpfs 4060201892404128   1% /run
/dev/mapper/test-root329233  270345 41890  87% /
tmpfs   5120   4  5116   1% /run/lock
tmpfs 812020 148811872   1% /run/shm
/dev/sdb1 233191   18789201961   9% /boot
/dev/mapper/test-home  39502452 5852096  31643728  16% /home
/dev/mapper/test-tmp 376807   10303347048   3% /tmp
/dev/mapper/test-usr8647944 4809964   3398684  59% /usr
/dev/mapper/test-var2882592  971236   1764924  36% /var
test#

1. I'm wondering if it's a disk space issue.

Can I purge all the update queue and try to update the kernel on its 
own then the remaining updates.

Guiadance would be appreciated,


  ___

People of the same trade seldom meet together, even for merriment and 
diversion, but the conversation ends in a conspiracy against the public

-- Adam Smith


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1406559412.20573.1@Kingston2



Re: Automatic upgrades stalls on the last kernel release

2014-07-28 Thread Henrique de Moraes Holschuh
On Mon, 28 Jul 2014, Paul Lewis wrote:
> 'cannot copy extracted data for '.lib/modules/3.2.0-4amd64/kernel/
> drivers/net/wireless/rt2x00/rt61pci.ko' to '/lib/modules/3.2.0-4-amd64/
> kernel/drivers/net/wireless/rt2x00/rt61pci.ko.dpkg-new'.

> 1. I'm wondering if it's a disk space issue.

Or lack of free inodes issue.  Run "df -i" to check.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728144856.ga9...@khazad-dum.debian.net



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Paul Condon
On Mon, Jul 28, 2014 at 02:56:40PM +0100, Brian wrote:
> On Mon 28 Jul 2014 at 14:02:29 +0200, Slavko wrote:
> 
> > Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
> > napísal:
> > 
> > > He could check with nc.
> > > 
> > >   brian@desktop:~$ nc smtp.gmail.com 25
> > >   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
> > > 
> > 
> > AFAIK, the port 25 have to used only for (inter-) servers connections,
> > the clients have connect via 587, the port 25 for client connections is
> > for backward compatibility only.
> 
> How does the server tell the difference between talking to another
> server (which is acting as client) and what you call a "client"?

I have found a script on the web that makes Mutt into a work-alike
substitute for Thunderbird. I don't like it, but it is a start at
getting what I once had. The script has at least one undocumented
Mutt command and other curiosities which I want to resolve before
I feel comfortable with my new situation. I already know that gmail
uses (and publishes for others to use) several different port numbers.
I haven't yet determined whether the different numbers are because
they have changed there interface over time or they simply intend
to support all of them. But, for now, I am in the much happier condition
of tweeking a new toy, than the recent past where I was unable to
reply to email without going through so much pain that I couldn't
remember what I wanted to say by the time I could key in my message.
The script that I found uses 587, but a different sript that I 
found (and didn't work) uses 465. If this email gets to the
debian-user list, and gets properly connected to the thread that is
being quoted, the problem is Solved. I think I have even got gmail
to masquerade as my old email address. We shall see.
 
Thanks to all,
Best regards,

-- 
Paul E Condon   
pecon...@mesanetworks.net


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728151159.ga5...@gmail.com



Wheezy: pressing power button initiates a suspend in parallel with system halt

2014-07-28 Thread Marcin Owsiany
I'm running stable on an amd64 PC since wheezy release. Until recently, I
was able to nicely suspend and resume the system by pressing the hardware
"power" button on the chassis.


After a recent update (not sure which packages are involved, as a lot of
time has passed since the last update on that machine), I noticed that when
I press the power button the system starts to suspend, but at the same time
a shutdown is started - I can get a glimpse of the message:

Power button pressed.

as it appears on all terminals just before the screen blanks. As a result
of this, as soon as the system completes the resume, it goes on and
continues with the shutdown and the machine powers off.

I'm using GNOME classic session.

How do I debug this? Where do I begin?

-- 
Marcin Owsiany   http://marcin.owsiany.pl/
GnuPG: 1024D/60F41216  FE67 DA2D 0ACA FC5E 3F75  D6F6 3A0D 8AA0 60F4 1216

"Every program in development at MIT expands until it can read mail."
-- Unknown


Re: Debian problems

2014-07-28 Thread Curt
On 2014-07-28, DaCheng Gao  wrote:
> hi,Stephen.
>
> there is an optional way that you can install virtualbox(link:
> http://www.virtualbox.org) or
> vmware, and then you are able to create a new virtual machine like common pc 
> and
> install windows 7 or anyother alternative windows system. HAHA, so you
> can do what you
> have done in your old win7. have fun.

Isn't that what he said, in essence?

> is it a little bit helpful ?

Maybe not entirely.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltcqir.2l1.cu...@einstein.electron.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Paul Condon
On Mon, Jul 28, 2014 at 01:37:57PM +, Curt wrote:
> On 2014-07-28, Joel Rees  wrote:
> >
> > (Piques my curiosity.)
> >
> >> They have made
> >> it clear in that they do not require or use TLS.
> >
> > (Wondering what TLS has to do with strangeness in this case.)

I have read that without TLS the email file, and my password are
sent over the internet in the clear, un-encrypted, and that is
'clearly' a BAD THING. 

I have seen in recent days enough error message blaming TLS to
convince me that there are many programmers who beleive it is.
Until recently, I was like most of the world unaware of the
whole issue.


> >
> 
> Maybe what mutt has to do with vlc. 

-- 
Paul E Condon   
pecon...@mesanetworks.net


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728153539.gb5...@gmail.com



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Slavko
Ahoj,

Dňa Mon, 28 Jul 2014 14:56:40 +0100 Brian 
napísal:

> On Mon 28 Jul 2014 at 14:02:29 +0200, Slavko wrote:
> 
> > Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
> > napísal:
> > 
> > > He could check with nc.
> > > 
> > >   brian@desktop:~$ nc smtp.gmail.com 25
> > >   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
> > > 
> > 
> > AFAIK, the port 25 have to used only for (inter-) servers
> > connections, the clients have connect via 587, the port 25 for
> > client connections is for backward compatibility only.
> 
> How does the server tell the difference between talking to another
> server (which is acting as client) and what you call a "client"?

I don't know how server can differ the client and another server, but
from abstract of RFC 6409 (which obsoletes the RFC 4409 which
obsoletes the RFC 2476):

   Message relay is unaffected, and continues to use SMTP over port 25.

   When conforming to this document, message submission uses the
   protocol specified here, normally over port 587.

And latter in the same RFC:

3.  Message Submission

3.1.  Submission Identification

   Port 587 is reserved for email message submission as specified in
   this document.  Messages received on this port are defined to be
   submissions.  The protocol used is ESMTP [SMTP-MTA], with additional
   restrictions or allowances as specified here.

   Although most email clients and servers can be configured to use port
   587 instead of 25, there are cases where this is not possible or
   convenient.  A site MAY choose to use port 25 for message submission
   by designating some hosts to be MSAs and others to be MTAs.

By this i assume, that i posted formerly.

As client i consider the MUA, but e.g. exim has a "client mode" too (i
don't know about other MTAs). I am sorry for simplification.

I want to point, that for end users is intended the 587 port, as
mentioned someone other too, and IMO it is not a good opinion to
suggest to try (check) the port 25, if the 587 is provided. Another
goal is, that there are some ISP, which don't blocks/redirects/proxies
the 587 port yet ;-)

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Darac Marjal
On Mon, Jul 28, 2014 at 09:35:39AM -0600, Paul Condon wrote:
> On Mon, Jul 28, 2014 at 01:37:57PM +, Curt wrote:
> > On 2014-07-28, Joel Rees  wrote:
> > >
> > > (Piques my curiosity.)
> > >
> > >> They have made
> > >> it clear in that they do not require or use TLS.
> > >
> > > (Wondering what TLS has to do with strangeness in this case.)
> 
> I have read that without TLS the email file, and my password are
> sent over the internet in the clear, un-encrypted, and that is
> 'clearly' a BAD THING. 

Yes-with-a-but.

TLS is the same technology used in HTTPS websites; it encrypts your
message in transit. The WWW and E-mail are quite different beasts,
though. E-mail is primarily a multi-hop, server-to-server communication.
If you connect to your ISP and send a message using TLS, then yes, your
message is protected from prying eyes. The message is now at the ISP's
server but it's not destined for them, so they connect to another server
(either the MX for the recipient or perhaps just another outgoing hop).
At this point, you have no control over how the message is handled.
Maybe it's sent with TLS, but probably not. Maybe it's sent within
seconds, but it could be held for hours or days.

If you really care about people seeing what you write, use an end-to-end
encryption such as GPG. If you care about people seeing who you write
to, then don't use e-mail.

> 
> I have seen in recent days enough error message blaming TLS to
> convince me that there are many programmers who beleive it is.
> Until recently, I was like most of the world unaware of the
> whole issue.
> 
> 
> > >
> > 
> > Maybe what mutt has to do with vlc. 
> 
> -- 
> Paul E Condon   
> pecon...@mesanetworks.net
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: https://lists.debian.org/20140728153539.gb5...@gmail.com
> 


signature.asc
Description: Digital signature


Re: Wheezy: pressing power button initiates a suspend in parallel with system halt

2014-07-28 Thread Liam O'Toole
On 2014-07-28, Marcin Owsiany  wrote:
> --001a113ac58ab58dce04ff4229a9
> Content-Type: text/plain; charset=UTF-8
>
> I'm running stable on an amd64 PC since wheezy release. Until recently, I
> was able to nicely suspend and resume the system by pressing the hardware
> "power" button on the chassis.
>
>
> After a recent update (not sure which packages are involved, as a lot of
> time has passed since the last update on that machine), I noticed that when
> I press the power button the system starts to suspend, but at the same time
> a shutdown is started - I can get a glimpse of the message:
>
> Power button pressed.
>
> as it appears on all terminals just before the screen blanks. As a result
> of this, as soon as the system completes the resume, it goes on and
> continues with the shutdown and the machine powers off.
>
> I'm using GNOME classic session.
>
> How do I debug this? Where do I begin?
>

I would start with the GNOME Power Management settings (under System,
Preferences in the top panel).

-- 

Liam



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltcsjq.4kr.liam.p.otoole@dipsy.tubbynet



Re: Exim4 not routing local mail, even after exim4-config (was New 64bit installation: Exim4 Send to Root)

2014-07-28 Thread David Baron
On Monday 28 July 2014 15:21:36 debian-user-digest-requ...@lists.debian.org 
wrote:
> > Now, if I simply send to a user, the mail will be delivered.
> > If I simply send to "root," it gets correctly aliased over to 
> > "system_notifications," but then gets returned!
> >
> > 
> >
> > So original problem remains !?!
> 
> 'exim -bt ' might help.

~$ sudo exim4 -bt root
R: system_aliases for r...@dovidhalevi.homelinux.net
R: system_aliases for system_notificat...@dovidhalevi.homelinux.net
R: userforward for system_notificat...@dovidhalevi.homelinux.net
R: procmail for system_notificat...@dovidhalevi.homelinux.net
system_notificat...@dovidhalevi.homelinux.net
<-- r...@dovidhalevi.homelinux.net
  router = procmail, transport = procmail_pipe''

~$ sudo exim4 -bt system_notification
R: system_aliases for system_notificat...@dovidhalevi.homelinux.net
R: userforward for system_notificat...@dovidhalevi.homelinux.net
R: procmail for system_notificat...@dovidhalevi.homelinux.net
system_notificat...@dovidhalevi.homelinux.net
  router = procmail, transport = procmail_pipe

Sure looks in order. But it doesn't work.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/2153879.IyOjCRrjZ7@dovidhalevi



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Slavko
Ahoj,

Dňa Mon, 28 Jul 2014 09:35:39 -0600 Paul Condon 
napísal:

> On Mon, Jul 28, 2014 at 01:37:57PM +, Curt wrote:
> > On 2014-07-28, Joel Rees  wrote:
> > >
> > > (Piques my curiosity.)
> > >
> > >> They have made
> > >> it clear in that they do not require or use TLS.
> > >
> > > (Wondering what TLS has to do with strangeness in this case.)
> 
> I have read that without TLS the email file, and my password are
> sent over the internet in the clear, un-encrypted, and that is
> 'clearly' a BAD THING. 

Sure, you are right about unencrypted messages.

But ISP in my work (state-owned school, ISP provided by our government and
owned by the Deutsche Telekom) proxies the 25 port, which has a result
in removing the the STARTTLS advertising from our mail server and then
the STARTTLS fails. If mail provider doesn't provides the 587 port
(yes, it seems, that the Deutsche Telekom know nothing about them),
or (obsolete) 465 port there isn't another way how to send encrypted
emails.

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Paul E Condon
On Mon, Jul 28, 2014 at 02:02:29PM +0200, Slavko wrote:
> Ahoj,
> 
> Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
> napísal:
> 
> > On Sun 27 Jul 2014 at 10:03:29 +0100, Jonathan Dowland wrote:
> > 
> > > My current best guess is you are attempting to connect to gmail's
> > > servers on port 25 and your ISP has blocked connections to port 25
> > > for any server except their own, in which case port 587 should work
> > > instead.
> > 
> > He could check with nc.
> > 
> >   brian@desktop:~$ nc smtp.gmail.com 25
> >   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
> > 
> 
> AFAIK, the port 25 have to used only for (inter-) servers connections,

Well no, not using 25, but I am using this thread to test if I have
fixed a different problem in my email setup. 
OK to not respond to this denial (;-)

> the clients have connect via 587, the port 25 for client connections is
> for backward compatibility only.
> 
> regards
> 
> -- 
> Slavko
> http://slavino.sk



-- 
Paul E Condon   
pecon...@mesanetworks.net


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728160138.ga5...@gmail.com



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Curt
On 2014-07-28, Paul Condon  wrote:
>
> I have read that without TLS the email file, and my password are
> sent over the internet in the clear, un-encrypted, and that is
> 'clearly' a BAD THING. 

True, but I would think (and here I have the enormous liberty that
comes from thinking in an almost total ignorance of the subject) that
the chances of your password being eavesdropped somewhere between you at
home and the remote mail server of your ISP (at some "node" on the
network? or sumthin'?) is remote.

No idea how it's done.

Still, I agree totally with you (my ISP uses SSL--I guess they're behind
the times).

> I have seen in recent days enough error message blaming TLS to
> convince me that there are many programmers who beleive it is.
> Until recently, I was like most of the world unaware of the
> whole issue.




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltctcs.2l1.cu...@einstein.electron.org



Re: Exim4 not routing local mail, even after exim4-config (was New 64bit installation: Exim4 Send to Root)

2014-07-28 Thread Ron Leach

On 28/07/2014 17:01, David Baron wrote:

~$ sudo exim4 -bt root
R: system_aliases for r...@dovidhalevi.homelinux.net
R: system_aliases for system_notificat...@dovidhalevi.homelinux.net
R: userforward for system_notificat...@dovidhalevi.homelinux.net
R: procmail for system_notificat...@dovidhalevi.homelinux.net
system_notificat...@dovidhalevi.homelinux.net
 <-- r...@dovidhalevi.homelinux.net
   router = procmail, transport = procmail_pipe''

~$ sudo exim4 -bt system_notification
R: system_aliases for system_notificat...@dovidhalevi.homelinux.net
R: userforward for system_notificat...@dovidhalevi.homelinux.net
R: procmail for system_notificat...@dovidhalevi.homelinux.net
system_notificat...@dovidhalevi.homelinux.net
   router = procmail, transport = procmail_pipe

Sure looks in order. But it doesn't work.




Are you sure there is a route from (i) whichever machine has the alias 
record, and (ii) whichever machine is reached, on port 25, at the IP 
address in an MX record at

dovidhalevi.homelinux.net
or, if there is no MX record, whatever machine is reached on port 25 
at the IP address pointed to by

dovidhalevi.homelinux.net ?

I had a similar problem to this, when using a NAT router on an ADSL 
line, behind which was my exim server.  The exim server tried to find
xxx.homelinux.net, found an IP address for it from DNS, tried to reach 
the address, but the ADSL router would not - for some reason - accept 
outgoing SMTP packets back into itself on port 25, whether looped back 
itself, or tromboned by a router upstream in the ISP's network.  Or 
maybe tromboning like that was blocked by the ISP.  Whatever the 
reason, I solved the problem in either of 2 ways.


(a) Routed outbound SMTP on a different route, different IP, than the 
IP that xxx.homelinux.net pointed to (I used a 3G network), or
(b) set /etc/hosts on the exim machine to point xxx.homelinux.net to 
itself so that exim made no attempt to signal externally.


You may already have checked this, but this just seems to me to have a 
sense of being a routing problem, rather than an mailserver problem.


Apologies if I'm off-track there.


regards, Ron


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53d677d4.9010...@tesco.net



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Curt
On 2014-07-28, Paul E Condon  wrote:
>
> Well no, not using 25, but I am using this thread to test if I have
> fixed a different problem in my email setup. 
> OK to not respond to this denial (;-)
>

Much more clever than one of those maddening "test" posts.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltcu6q.2l1.cu...@einstein.electron.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread John Hasler
Slavko writes:
> If mail provider doesn't provides the 587 port (yes, it seems, that
> the Deutsche Telekom know nothing about them), or (obsolete) 465 port
> there isn't another way how to send encrypted emails.

TLS only protects you against being impersonated and against your
messages being intercepted between you and the server.  If you need to
keep the contents of your messages secret you must use end-to-end
encryption.
-- 
John Hasler 
jhas...@newsguy.com
Elmwood, WI USA


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87r415tpcj@thumper.dhh.gt.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Curt
On 2014-07-28, John Hasler  wrote:
> Slavko writes:
>> If mail provider doesn't provides the 587 port (yes, it seems, that
>> the Deutsche Telekom know nothing about them), or (obsolete) 465 port
>> there isn't another way how to send encrypted emails.
>
> TLS only protects you against being impersonated and against your
> messages being intercepted between you and the server.  If you need to
> keep the contents of your messages secret you must use end-to-end
> encryption.

Just when Paul thought his troubles were over.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnltd0uf.2l1.cu...@einstein.electron.org



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 10:34:03 -0400, Jerry Stuckle wrote:

> On 7/28/2014 9:56 AM, Brian wrote:
> > 
> > How does the server tell the difference between talking to another
> > server (which is acting as client) and what you call a "client"?
> 
> It doesn't, but operation is quite different.  MTA's typically require
> no login on port 25, but only allow messages to be sent to domains it
> serves (otherwise it quickly becomes a spam server).  Port 587 requires
> a login, but allows messages to be relayed to any domain.

Would I be correct in thinking MTAs only talk to each other over port
25?

Would I also be right that using port 587 mandates authentication
whereas with port 25 it is optional?

> Now, for historic reasons, some MTA's still allow login on port 25
> (either directly or some indirect method like accessing a POP or IMAP
> account before sending).  But these are becoming fewer and fewer.

Port 25 then becomes used only for incoming messages to be sent to
domains the server is responsible for? If so, that doesn't appear any
different from the present situation. For relaying a login is perfectly
understanable, but it can be done on port 25 too. What makes port 587
necessary?

All my mail from home is sent directly using exim which, as far as I can
make out will only send on port 25. Leaving aside what you say below (my
ISP does not block outgoing port 25 traffic) I should not be affected?
 
> BTW, many ISP's have blocked outgoing port 25 connections (especially on
> residential accounts) because there are a lot of trojans out there which
> will install a minimal MTA on a user's machine, unbeknownst to the user.
>  This allows spammers to use the compromised machine to be a spam
> source, hiding the real source of the spam.

So, in world where every ISP blocks outgoing port 25 connections the
delivering of one's own mail becomes impossible. The flow of spam and
malware across the net will continue to increase though, I suppose.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/28072014174804.fdd19e1d8...@desktop.copernicus.demon.co.uk



Re: acpid won't stop, won't upgrade (systemd) - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736258

2014-07-28 Thread Jonathan de Boyne Pollard
ZH> $ sudo systemctl stop acpid
ZH> Job for acpid.service canceled.

... because, as noted, it's a socket-activated service, which actually
makes it two separately startable and stoppable things
("acpid.service" and "acpid.socket") in the world of systemd, only one
of which is being stopped when you're trying to take the entire
service down, with the other immediately trying to bring it back up.

And bugs #734766 and #734848 tell one the answer, which is that in
order to preserve its existing conceptual model that there is just the
one thing (named simply "acpid") invoke-rc.d should pull out the
"socket" from the "service" by looking for a "TriggeredBy="
relationship in the output of "systemctl show", and operate upon both
things together, whenever it finds a socket-activated service.
There's even an attempt at a patch that does that.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CACF=bdsjs+o+rdkf2bbt09pmgo77z-cpzqu1hmrhe73fvyd...@mail.gmail.com



Re: New 64bit Installation. Root partition too small--what to do?

2014-07-28 Thread David Christensen

On 07/28/2014 01:13 AM, David Baron wrote:

Disk has one region (that I know of) with errors.
I can partition so this region is not used.
Is there some utility to repair it?
Is this sickness like to spread?


You first have to determine *precisely* what is wrong with the drive.
That requires the proprietary information and engineering resources of 
the drive manufacturer, and the knowledge and skills to use them.  The 
practical answer is to buy another drive.




Temporarily, [my 80 GB drive] should do just fine [as system drive].
Easy to move using lilo :-)


Moving a questionable Linux system image from a broken hard disk drive 
to a working drive will result in a questionable Linux system.  The 
practical answer is to do a fresh install on the working drive.



HTH,

David


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53d6881c.7000...@holgerdanske.com



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 17:37:19 +0200, Slavko wrote:

> Dňa Mon, 28 Jul 2014 14:56:40 +0100 Brian 
> napísal:
> 
> > How does the server tell the difference between talking to another
> > server (which is acting as client) and what you call a "client"?

[RFC abstracts snipped. Thanks for them. I'll get round to reading in
detail later]
 
> As client i consider the MUA, but e.g. exim has a "client mode" too (i
> don't know about other MTAs). I am sorry for simplification.

No need to be sorry. The simplification was fine. It's just that here
mutt and other MUAs connect to exim for direct mail delivery. I wanted
to clarify that servers can also be clients.

> I want to point, that for end users is intended the 587 port, as
> mentioned someone other too, and IMO it is not a good opinion to
> suggest to try (check) the port 25, if the 587 is provided. Another
> goal is, that there are some ISP, which don't blocks/redirects/proxies
> the 587 port yet ;-)

  brian@desktop:~$ nmap -Pn mail.o2.co.uk

  Starting Nmap 6.00 ( http://nmap.org ) at 2014-07-28 18:30 BST
  Nmap scan report for mail.o2.co.uk (82.132.141.69)
  Host is up (0.047s latency).
  Not shown: 998 filtered ports
  PORTSTATE SERVICE
  25/tcp  open  smtp
  110/tcp open  pop3

  Nmap done: 1 IP address (1 host up) scanned in 7.61 seconds

Whether they direct all outgoing port 25 trafic to their own server I do
not know.

Your observation that ISPs could also interfere with port 587 doesn't
cheer me up. :)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/28072014182232.527daac4e...@desktop.copernicus.demon.co.uk



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Bob Holtzman
On Mon, Jul 28, 2014 at 09:11:59AM -0600, Paul Condon wrote:
> On Mon, Jul 28, 2014 at 02:56:40PM +0100, Brian wrote:
> > On Mon 28 Jul 2014 at 14:02:29 +0200, Slavko wrote:
> > 
> > > Dňa Sun, 27 Jul 2014 13:02:18 +0100 Brian 
> > > napísal:
> > > 
> > > > He could check with nc.
> > > > 
> > > >   brian@desktop:~$ nc smtp.gmail.com 25
> > > >   220 mx.google.com ESMTP 19sm41008233wjz.3 - gsmtp
> > > > 
> > > 
> > > AFAIK, the port 25 have to used only for (inter-) servers connections,
> > > the clients have connect via 587, the port 25 for client connections is
> > > for backward compatibility only.
> > 
> > How does the server tell the difference between talking to another
> > server (which is acting as client) and what you call a "client"?
> 
> I have found a script on the web that makes Mutt into a work-alike
> substitute for Thunderbird.

IIRC list protocol suggests that if you have found a solution to a
problem, you post it for others to see and use. "I have found a
script..." with no other useful information is a waste of everyones
time.

-- 
Bob Holtzman
Giant intergalactic brain-sucking hyperbacteria 
came to Earth to rape our women and create a race 
of mindless zombies.  Look!  It's working!


signature.asc
Description: Digital signature


Re: Automatic upgrades stalls on the last kernel release

2014-07-28 Thread Joe
On Mon, 28 Jul 2014 15:56:52 +0100
Paul Lewis  wrote:

> 
> I seem to have a problem with automatic updates on my system. The AU 
> system has been unable to function normally for some time and I now 
> have something like 61 updates waiting in the queue.
> 
> 
> When I try to process the updates, it seems to choke on the Linux 3.2 
> for 64 bit PCs entry,  which is linux-image-3.2.0-4-amd64-3.2.60-1
> +deb7u1 (64bit)
> 
> reported as 23.4MBs.
> 
>   The error is "Failed to process request." and more details
> are -
> 
> 'cannot copy extracted data for '.lib/modules/3.2.0-4amd64/kernel/
> drivers/net/wireless/rt2x00/rt61pci.ko' to
> '/lib/modules/3.2.0-4-amd64/
> kernel/drivers/net/wireless/rt2x00/rt61pci.ko.dpkg-new'.
> 
> If I manually copy the file and rerun the update, it just produces a 
> similar error message with a different file name.
> 
> df returns the following;
> test:# df
> Filesystem 1K-blocksUsed Available Use% Mounted on
> rootfs329233  270345 41890  87% /
> udev   10240   0 10240   0% /dev
> tmpfs 4060201892404128   1% /run
> /dev/mapper/test-root329233  270345 41890  87% /
> tmpfs   5120   4  5116   1% /run/lock
> tmpfs 812020 148811872   1% /run/shm
> /dev/sdb1 233191   18789201961   9% /boot
> /dev/mapper/test-home  39502452 5852096  31643728  16% /home
> /dev/mapper/test-tmp 376807   10303347048   3% /tmp
> /dev/mapper/test-usr8647944 4809964   3398684  59% /usr
> /dev/mapper/test-var2882592  971236   1764924  36% /var
> test#
> 
> 1. I'm wondering if it's a disk space issue.
> 

Almost certainly. Kernels aren't that big, but the /lib/modules/* that
match them are now 100MB-ish. When you install a new kernel, you need
that space, but an upgrade of the same kernel release should work in
less.

> Can I purge all the update queue and try to update the kernel on its 
> own then the remaining updates.
> 

You have run out of space for something kernel-sized. Do you have an
old kernel you can get rid of? 270MB on / with separate /var and /usr
looks like two kernels-worth.

I've run into this one on my server, and will have to reorganise disc
space before the next upgrade. 300MB used to be more than enough for /,
but isn't now. I keep a spare kernel, and will have to lose it before I
upgrade to another release, though that shouldn't be a problem as I
think I would have seen any problems with the running kernel by now.

Also, a separate /usr, which has been routine until recently, is now a
bad idea, as some of it may be needed at boot time. Not yet a
show-stopper, but one day it will be. From your kernel, you are
presumably running stable, and the next stable will use systemd, with a
lot of re-jigged software.

You can nudge things around a bit without too much trouble on LVM to
get some more space on / (but it still isn't quite a trivial job,
depending on physical location and whether there is unused space or you
have to shrink something else). In the very long term, you will need to
merge / and /usr, but the trouble is that /usr must be put into /, not
the other way round, so there's a fair bit of messing about involved if
you need to minimise downtime. You can't pull /lib/modules out into
another partition, as that is very definitely required at boot time.

If you don't have an old kernel in there, you're looking at some LVM
shifting, and if your drive is four or five years old, it might be time
to consider replacement, which makes things much easier. My main
workstation drive is now five years old, and I'm waiting for its
replacement to arrive. I'll probably also replace the server drive when
I need to upgrade stable on that.

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728191458.010da...@jretrading.com



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Slavko
Ahoj,

Dňa Mon, 28 Jul 2014 18:37:54 +0100 Brian 
napísal:

> No need to be sorry. The simplification was fine. It's just that here
> mutt and other MUAs connect to exim for direct mail delivery. I wanted
> to clarify that servers can also be clients.

It is named as "with smarthost", it can be easy set by the
dpkg-reconfigure exim4-config dialog ;)

> > I want to point, that for end users is intended the 587 port, as
> > mentioned someone other too, and IMO it is not a good opinion to
> > suggest to try (check) the port 25, if the 587 is provided. Another
> > goal is, that there are some ISP, which don't
> > blocks/redirects/proxies the 587 port yet ;-)
> 
>   brian@desktop:~$ nmap -Pn mail.o2.co.uk
> 
>   Starting Nmap 6.00 ( http://nmap.org ) at 2014-07-28 18:30 BST
>   Nmap scan report for mail.o2.co.uk (82.132.141.69)
>   Host is up (0.047s latency).
>   Not shown: 998 filtered ports
>   PORTSTATE SERVICE
>   25/tcp  open  smtp
>   110/tcp open  pop3
> 
>   Nmap done: 1 IP address (1 host up) scanned in 7.61 seconds

Beware, port scan can be criminal in some countries...

> Whether they direct all outgoing port 25 trafic to their own server I
> do not know.

Try ask your email provider to enable 587 port, pointing to the
mentioned RFC ;)

> Your observation that ISPs could also interfere with port 587 doesn't
> cheer me up. :)

It is black side of the freedom...

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 20:16:08 +0200, Slavko wrote:

> 
> Dňa Mon, 28 Jul 2014 18:37:54 +0100 Brian 
> napísal:
> 
> > No need to be sorry. The simplification was fine. It's just that here
> > mutt and other MUAs connect to exim for direct mail delivery. I wanted
> > to clarify that servers can also be clients.
> 
> It is named as "with smarthost", it can be easy set by the
> dpkg-reconfigure exim4-config dialog ;)

I'm aware of the capabilities of 'dpkg-reconfigure exim4-config' and the
'smarthost' option. On this machine (at home) I can deliver my own mail
to its destination without having to rely on someone else. Advantages
are that I get immediate feedback and the certain knowledge the mail has
arrived at its destination.

When out roaming, I use my own server as a smarthost to get the same
advantages.

> > > I want to point, that for end users is intended the 587 port, as
> > > mentioned someone other too, and IMO it is not a good opinion to
> > > suggest to try (check) the port 25, if the 587 is provided. Another
> > > goal is, that there are some ISP, which don't
> > > blocks/redirects/proxies the 587 port yet ;-)
> > 
> >   brian@desktop:~$ nmap -Pn mail.o2.co.uk
> > 
> >   Starting Nmap 6.00 ( http://nmap.org ) at 2014-07-28 18:30 BST
> >   Nmap scan report for mail.o2.co.uk (82.132.141.69)
> >   Host is up (0.047s latency).
> >   Not shown: 998 filtered ports
> >   PORTSTATE SERVICE
> >   25/tcp  open  smtp
> >   110/tcp open  pop3
> > 
> >   Nmap done: 1 IP address (1 host up) scanned in 7.61 seconds
> 
> Beware, port scan can be criminal in some countries...

Do you really mean "criminal"? Which countries are these which
criminalise looking at something which is in a public place? Walking
round with my eyes closed and my brain closed down isn't an attracive
prospect.

> > Whether they direct all outgoing port 25 trafic to their own server I
> > do not know.
> 
> Try ask your email provider to enable 587 port, pointing to the
> mentioned RFC ;)

mail.o2.co.uk is not a server I use; it was an example. My "email
provider" (for sending) is myself. Completely trustworthy and reliable.

> > Your observation that ISPs could also interfere with port 587 doesn't
> > cheer me up. :)
> 
> It is black side of the freedom...

That hasn't done much to increase my cheerfulness. :)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/28072014192714.cd9215baf...@desktop.copernicus.demon.co.uk



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Slavko
Ahoj,

Dňa Mon, 28 Jul 2014 19:57:52 +0100 Brian 
napísal:

> Do you really mean "criminal"? Which countries are these which
> criminalise looking at something which is in a public place? Walking
> round with my eyes closed and my brain closed down isn't an attracive
> prospect.

IMO, this is a common mistake, if something is in public place, it
doesn't mean, that it is a public thing. E.g. if i will on the plaza
(it is a public place), then i will still the privacy person :)
My doors and windows are on public side of my home, but when you will
try to open them, you can be considered as stealer, etc.

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


vps supporting debian dist-upgrade.

2014-07-28 Thread Alexandros Prekates
My vps provider informed (after me having trouble upgrading to wheezy)
that such upgrades are unsupported and the suggest to switch to a new
server.

My question is if that kind of support is really difficult to find , or
is it inhereted in the technology used for virtualization so i could
easily find it elsewhere.

Could the community help me giving me some guide what to check for in
searching for that king of support.

aprekates


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728220706.0ec20e0b@enous.homenet



Re: Exim4 not routing local mail, even after exim4-config (was New 64bit installation: Exim4 Send to Root)

2014-07-28 Thread David Baron
On Monday 28 July 2014 17:38:14 debian-user-digest-requ...@lists.debian.org 
wrote:
> Are you sure there is a route from (i) whichever machine has the alias 
> record, and (ii) whichever machine is reached, on port 25, at the IP 
> address in an MX record at
> dovidhalevi.homelinux.net
> or, if there is no MX record, whatever machine is reached on port 25 
> at the IP address pointed to by
> dovidhalevi.homelinux.net ?

I am not sure I understand the question. In any event, this routing is meant 
for internal mail only.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/8425823.LLvu8mB5GH@dovidhalevi



Re: New 64bit Installation. Root partition too small--what to do?

2014-07-28 Thread David Baron
On Monday 28 July 2014 17:38:14 debian-user-digest-requ...@lists.debian.org 
wrote:
> > Disk has one region (that I know of) with errors.
> > I can partition so this region is not used.
> > Is there some utility to repair it?
> > Is this sickness like to spread?
> 
> You first have to determine *precisely* what is wrong with the drive.
> That requires the proprietary information and engineering resources of 
> the drive manufacturer, and the knowledge and skills to use them.  The 
> practical answer is to buy another drive.

Why I am reluctant to "wipe and recycle" this drive. Most-most of one terra 
though.

> > Temporarily, [my 80 GB drive] should do just fine [as system drive].
> > Easy to move using lilo
> 
> Moving a questionable Linux system image from a broken hard disk drive 
> to a working drive will result in a questionable Linux system.  The 
> practical answer is to do a fresh install on the working drive.

The images came from the new install, were never on the bad drive. Should have 
no problems  until the 80giger begins to go. Only home was brought over from 
the bad drive and there were no problems on that partition. I saved copy of 
the old /etc as well from which to take configuration stuff if I needed it. So 
am running a fresh install. The problems are only the crappy partitioning done 
by the installer.

A fresh install would require another new drive if I do not want to move stuff 
on and off the bad one.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/13148818.QxIYlxgU75@dovidhalevi



Re: Pin package to "any version, don't remove"?

2014-07-28 Thread Andrei POPESCU
On Du, 27 iul 14, 16:07:34, The Wanderer wrote:
> On 07/20/2014 09:10 AM, Andrei POPESCU wrote:
> 
> Yes, even with 'Priority: essential'. Possibly that's a side effect of
> something else (the default of 'Section: misc', maybe?), but I have
> nothing to really support that idea.

Essential is not a priority, but a separate field:

Essential: yes

See package 'apt' (ha!) as an example.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 21:08:02 +0200, Slavko wrote:

> Dňa Mon, 28 Jul 2014 19:57:52 +0100 Brian 
> napísal:
> 
> > Do you really mean "criminal"? Which countries are these which
> > criminalise looking at something which is in a public place? Walking
> > round with my eyes closed and my brain closed down isn't an attracive
> > prospect.

You never really answered my questiom. If you place something in a
public place, a mailserver, for example, why should it be a criminal
offence to look at it. If you did not want it to be seen you have the
solution at hand.
 
> IMO, this is a common mistake, if something is in public place, it
> doesn't mean, that it is a public thing. E.g. if i will on the plaza

By being in public there all sorts of things which can happen to you.
People can do all sorts of things. For example, they can come and talk
to you, buy a meal a meal for you, give you a discarded newpaper to
read, rob you (that's a reportable offence), sing to you, try to sell
you lottery tickets etc, etc.

Don't want any of this; don't go out.

> (it is a public place), then i will still the privacy person :)
> My doors and windows are on public side of my home, but when you will
> try to open them, you can be considered as stealer, etc.

How do feel about people looking at your house and looking in through
the windows? You never know what they are thinking and what information
they are gathering.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/28072014202851.78dda668b...@desktop.copernicus.demon.co.uk



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Slavko
Ahoj,

Dňa Mon, 28 Jul 2014 20:51:31 +0100 Brian 
napísal:

> You never really answered my questiom. If you place something in a
> public place, a mailserver, for example, why should it be a criminal
> offence to look at it. If you did not want it to be seen you have the
> solution at hand.

Yes, i provided answer to you. I try it again: If is something in
public place, it doesn't mean, that anybody can do anything with it.

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature


Re: Latest Jessie doesn't respond to /etc/default/tmpfs "RAMTMP=yes"

2014-07-28 Thread Andrei POPESCU
On Du, 27 iul 14, 17:31:37, Rick Thomas wrote:
> 
> I still can’t figure out how to exercise control over the size and 
> other mount options, the way I used to be able to do under sysvinit 
> using options in /etc/default/tmpfs .

Create /etc/systemd/system/tmp.mount with something like:

.include /lib/systemd/system/tmp.mount
[Mount]
Options=... (your options)

It's not entirely clear from the documentation if your options replace 
or just add to the ones in the included unit, but I'd be interested to 
know as well.

All of the above is a) untested b) based on information found in 
systemd.unit(5) and systemd.mount(5). For the options relevant for tmpfs 
you'll have to check mount(8).

As a side note, I'd also be interested in the reasons for the default 
options set by the systemd tmp.mount unit (mode=1777,strictatime), a 
superficial web search did not find anything.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Jerry Stuckle
On 7/28/2014 1:16 PM, Brian wrote:
> On Mon 28 Jul 2014 at 10:34:03 -0400, Jerry Stuckle wrote:
> 
>> On 7/28/2014 9:56 AM, Brian wrote:
>>>
>>> How does the server tell the difference between talking to another
>>> server (which is acting as client) and what you call a "client"?
>>
>> It doesn't, but operation is quite different.  MTA's typically require
>> no login on port 25, but only allow messages to be sent to domains it
>> serves (otherwise it quickly becomes a spam server).  Port 587 requires
>> a login, but allows messages to be relayed to any domain.
> 
> Would I be correct in thinking MTAs only talk to each other over port
> 25?
>

That is correct.

> Would I also be right that using port 587 mandates authentication
> whereas with port 25 it is optional?
> 

In a correctly operating MTA, yes.

>> Now, for historic reasons, some MTA's still allow login on port 25
>> (either directly or some indirect method like accessing a POP or IMAP
>> account before sending).  But these are becoming fewer and fewer.
> 
> Port 25 then becomes used only for incoming messages to be sent to
> domains the server is responsible for? If so, that doesn't appear any
> different from the present situation. For relaying a login is perfectly
> understanable, but it can be done on port 25 too. What makes port 587
> necessary?
> 

This became necessary due to the number of trojans used by spammers to
compromise unsuspecting users.  As a result, many ISP's now block any
outgoing requests to port 25.  In my area, both Verizon and Comcast
(Xfinity) do, for instance.

> All my mail from home is sent directly using exim which, as far as I can
> make out will only send on port 25. Leaving aside what you say below (my
> ISP does not block outgoing port 25 traffic) I should not be affected?
>  

Exim can use other ports also.  It's all in the configuration. (but
sorry, I do not have enough expertise to tell you exactly how to do it).

>> BTW, many ISP's have blocked outgoing port 25 connections (especially on
>> residential accounts) because there are a lot of trojans out there which
>> will install a minimal MTA on a user's machine, unbeknownst to the user.
>>  This allows spammers to use the compromised machine to be a spam
>> source, hiding the real source of the spam.
> 
> So, in world where every ISP blocks outgoing port 25 connections the
> delivering of one's own mail becomes impossible. The flow of spam and
> malware across the net will continue to increase though, I suppose.
> 
> 

No, it just means you need to connect to a mail server via port 587,
then have it send the email.

If spammers can't use compromised machines, it severely limits the
number of servers they can use.  And since an IP can be blacklisted if
too much spam is sent through it, responsible hosting companies and ISPs
(i.e. those who don't wish to be blacklisted) will limit the number of
messages which can be sent per time unit and/or terminate accounts for
sending spam.  A user on a compromised machine, though, wouldn't know
their system was blacklisted and probably wouldn't care.

Just another way to help protect unsuspecting users from themselves.

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d6acf7.3070...@attglobal.net



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Jerry Stuckle
On 7/28/2014 3:51 PM, Brian wrote:
> On Mon 28 Jul 2014 at 21:08:02 +0200, Slavko wrote:
> 
>> Dňa Mon, 28 Jul 2014 19:57:52 +0100 Brian 
>> napísal:
>>
>>> Do you really mean "criminal"? Which countries are these which
>>> criminalise looking at something which is in a public place? Walking
>>> round with my eyes closed and my brain closed down isn't an attracive
>>> prospect.
> 
> You never really answered my questiom. If you place something in a
> public place, a mailserver, for example, why should it be a criminal
> offence to look at it. If you did not want it to be seen you have the
> solution at hand.
>  

If your car is in a public parking lot, does that mean I can get in and
drive it off?

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d6adcc.1050...@attglobal.net



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Tom Furie
On Mon, Jul 28, 2014 at 10:00:00PM +0200, Slavko wrote:
> Ahoj,
> 
> Dňa Mon, 28 Jul 2014 20:51:31 +0100 Brian 
> napísal:
> 
> > You never really answered my questiom. If you place something in a
> > public place, a mailserver, for example, why should it be a criminal
> > offence to look at it. If you did not want it to be seen you have the
> > solution at hand.
> 
> Yes, i provided answer to you. I try it again: If is something in
> public place, it doesn't mean, that anybody can do anything with it.

To further the analogy that Brian touched on, looking at an object in a
public space is not and cannot be criminal. Using nmap as Brian did, is
like looking at a building and seeing what doors and windows it has, it
doesn't even go so far as checking to see if those doors and windows are
locked.

Cheers,
Tom

-- 
Tex SEX!  The HOME of WHEELS!  The dripping of COFFEE!!  Take me to
Minnesota but don't EMBARRASS me!!


signature.asc
Description: Digital signature


Re: /var partition seems locked or read only

2014-07-28 Thread Andrei POPESCU
On Lu, 28 iul 14, 11:24:31, berenger.mo...@neutralite.org wrote:
> Le 27.07.2014 01:42, PaulNM a écrit :
> 
> >Inodes are files/folders, files/folders are inodes. (1-to-1)  Anything
> >that has a bunch of files/folders will use a bunch of inodes. Same
> >number in fact.
> 
> Hum... is it accurate?
> Files can use more than one inode, with ln

Are you talking about hard links? As far as I understand (but I'm sure 
someone will correct me if I'm wrong) the file itself is always just one 
inode, but there are one or more directory entries (links) pointing to 
it. If you remove all of them the file is deleted.

> Folders can not, AFAIK, since
> symlinks are simply pointers to inodes (which are themselves pointers --with
> reference counter I guess, std::shared_ptr in c++11?-- to data).
> I'm simply asking, I might be completely wrong or inaccurate...

Symbolic links, a.k.a. soft links, a.k.a. "symlinks" are files 
themselves (i.e. each using one inode) that contain a pointer to one of 
the directory entries of another file or directory.

To ilustrate the two explanation see this series of commands:

$ echo 'some text' > testfile
$ ln testfile testhl
$ file testfile
testfile: ASCII text
$ file testhl
testhl: ASCII text
$ rm testfile
$ file testhl
testhl: ASCII text
$ mv testhl testfile
$ ln --symbolic testfile testsl
$ file testfile
testfile: ASCII text
$ file testsl
testsl: symbolic link to `testfile'
$ cat testsl
some text

(this is expected, since 'cat' will follow symbolic links)

$ rm testfile
$ cat testsl
cat: testsl: No such file or directory

(the error message is a bit misleading)

$ file testsl
testsl: broken symbolic link to `testfile'


This should also explain why hard links only work on the same filesystem 
while symbolic links also work across file systems and why you can 
delete a file if and only if you have write permissions for the 
*directory* containing it :)

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 22:00:00 +0200, Slavko wrote:

> Dňa Mon, 28 Jul 2014 20:51:31 +0100 Brian 
> napísal:
> 
> > You never really answered my questiom. If you place something in a
> > public place, a mailserver, for example, why should it be a criminal
> > offence to look at it. If you did not want it to be seen you have the
> > solution at hand.
> 
> Yes, i provided answer to you. I try it again: If is something in
> public place, it doesn't mean, that anybody can do anything with it.

You are stating the obvious.

I'll try a more technical answer. Remember, you were of the opinion that
using nmap could be a criminal offence in some countries (which you
declined to name).

I will use my preferred email client (telnet) for this test.

  brian@desktop:~$ telnet mail.o2.co.uk 25
  Trying 82.132.141.69...
  Connected to mail.o2.co.uk.
  Escape character is '^]'.
  220 mail.o2.co.uk ESMTP Service ready


  brian@desktop:~$ telnet mail.o2.co.uk 587
  Trying 82.132.141.69...
  telnet: Unable to connect to remote host: Connection timed out


I also used another 40.000 ports.

Happpier with this?

Communication is one of the most basic human needs. Have I transgressed
its boundaries?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728203837.gb19...@copernicus.demon.co.uk



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 16:05:11 -0400, Jerry Stuckle wrote:

> On 7/28/2014 1:16 PM, Brian wrote:
> 
> > All my mail from home is sent directly using exim which, as far as I can
> > make out will only send on port 25. Leaving aside what you say below (my
> > ISP does not block outgoing port 25 traffic) I should not be affected?
> >  
> 
> Exim can use other ports also.  It's all in the configuration. (but
> sorry, I do not have enough expertise to tell you exactly how to do it).

Exim will definitely *receive* mail on multiple ports; that much I do
know. Sending on other than port 25 would appear to contradict the idea
that MTAs only communicate over port 25. But I'll look into it.

> > So, in world where every ISP blocks outgoing port 25 connections the
> > delivering of one's own mail becomes impossible. The flow of spam and
> > malware across the net will continue to increase though, I suppose.
> 
> No, it just means you need to connect to a mail server via port 587,
> then have it send the email.

If exim cannot send over port 587. And how do I know the mail
server I'm connecting to is accepting on port 587? I don't think mine
does; I'll have to check. I'm provisionally of the same opinion as
expressed above; the flow of communication is controlled.

> If spammers can't use compromised machines, it severely limits the
> number of servers they can use.  And since an IP can be blacklisted if
> too much spam is sent through it, responsible hosting companies and ISPs
> (i.e. those who don't wish to be blacklisted) will limit the number of
> messages which can be sent per time unit and/or terminate accounts for
> sending spam.  A user on a compromised machine, though, wouldn't know
> their system was blacklisted and probably wouldn't care.
> 
> Just another way to help protect unsuspecting users from themselves.

I don't need or want protecting from myself. I'll go to hell in my own
way. :)


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728205650.gc19...@copernicus.demon.co.uk



Re: fsck progress not shown on boot with systemd as pid 1

2014-07-28 Thread Andrei POPESCU
On Lu, 28 iul 14, 11:22:30, Zenaan Harkness wrote:
> 
> 3) disable scrolling (I think Andrei said this is possible),

No, I said stopped (Ctrl-S / Ctrl-Q).

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Jerry Stuckle
On 7/28/2014 4:56 PM, Brian wrote:
> On Mon 28 Jul 2014 at 16:05:11 -0400, Jerry Stuckle wrote:
> 
>> On 7/28/2014 1:16 PM, Brian wrote:
>>
>>> All my mail from home is sent directly using exim which, as far as I can
>>> make out will only send on port 25. Leaving aside what you say below (my
>>> ISP does not block outgoing port 25 traffic) I should not be affected?
>>>  
>>
>> Exim can use other ports also.  It's all in the configuration. (but
>> sorry, I do not have enough expertise to tell you exactly how to do it).
> 
> Exim will definitely *receive* mail on multiple ports; that much I do
> know. Sending on other than port 25 would appear to contradict the idea
> that MTAs only communicate over port 25. But I'll look into it.
>

Yes and no.  There is also an concept of "smart host" (I don't know if
this is exim only), where all outgoing mail is routed through a
different host.  It's quite often used in large companies, for instance,
where an MTA receives all mail from users and delivers locally.  This
server is not directly accessible via the internet; rather another MTA
handles all traffic in and out of the network.

But the main thought here is - you shouldn't be running a local mail
server on a residential account.  There really is no need for it
(business accounts are different).

>>> So, in world where every ISP blocks outgoing port 25 connections the
>>> delivering of one's own mail becomes impossible. The flow of spam and
>>> malware across the net will continue to increase though, I suppose.
>>
>> No, it just means you need to connect to a mail server via port 587,
>> then have it send the email.
> 
> If exim cannot send over port 587. And how do I know the mail
> server I'm connecting to is accepting on port 587? I don't think mine
> does; I'll have to check. I'm provisionally of the same opinion as
> expressed above; the flow of communication is controlled.
> 

I never said Exim cannot send over port 587.  In fact, I said just the
opposite.  I just don't know enough about Exim configuration to provide
the details.

But then if you have residential service, there really is no need to
have your own MTA (other than you want it).

And even if you do have your own MTA, it doesn't help that much.  When
you send a message, all your MTA can do is tell you if the message was
accepted by the destination MTA.  Using a remote MTA will do the same thing.

One other thing - if you have a dynamic IP address, none of the servers
I maintain will ever accept your email.  Dynamic IPs are specifically
blocked due to spam problems.  That is also becoming more and more common.

>> If spammers can't use compromised machines, it severely limits the
>> number of servers they can use.  And since an IP can be blacklisted if
>> too much spam is sent through it, responsible hosting companies and ISPs
>> (i.e. those who don't wish to be blacklisted) will limit the number of
>> messages which can be sent per time unit and/or terminate accounts for
>> sending spam.  A user on a compromised machine, though, wouldn't know
>> their system was blacklisted and probably wouldn't care.
>>
>> Just another way to help protect unsuspecting users from themselves.
> 
> I don't need or want protecting from myself. I'll go to hell in my own
> way. :)
> 
> 

The problem is it's not YOU who suffers if your machine is compromised.
 It is the rest of the internet.

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d6bb34.6000...@attglobal.net



Re: fsck progress not shown on boot with systemd as pid 1

2014-07-28 Thread Andrei POPESCU
On Lu, 28 iul 14, 08:41:39, Chris Bannister wrote:
> On Sun, Jul 27, 2014 at 11:20:13AM +0300, Andrei POPESCU wrote:
> > 
> > You are aware of course that:
> > - it's also possible to scroll *back* (surprise, surprise)
> 
> Can you still? It used to be , (which didn't work last
> time I tried) have you found another way?

I just logged in on tty1, ran 'dmesg' and was able to scroll back 4 
pages with Shift-PgUp. I don't care much about the boot messages as 
journactl -b has all I need.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Does anyone have mimic-tools1.0.1.deb package?

2014-07-28 Thread Andrei POPESCU
On Lu, 28 iul 14, 11:49:44, Martin T wrote:
> Hi,
> 
> aMSN(free open source MSN Messenger clone) allowed one to store
> web-cam sessions, but saved those into cam files. There is an utility
> called mimic2rgb which allows one to convert those cam files into RGB
> video stream. At some point, there even were some Debian packages
> around(mimic-tools1.0.1.deb) which contained the mimic2rgb utility.
> However, at nowadays, it seems nearly impossible to find the Debian
> package(mimic-tools1.0.1.deb) or the source
> tarball(mimictools-1.0.1.tar.gz). Does anyone have an old repo
> mirrored somewhere which still has this package? However, I'm not sure
> if this package has ever been in any official repository..

If it was you can find it on snapshot.debian.org.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Joe
On Mon, 28 Jul 2014 18:16:23 +0100
Brian  wrote:

> On Mon 28 Jul 2014 at 10:34:03 -0400, Jerry Stuckle wrote:
> 
> > On 7/28/2014 9:56 AM, Brian wrote:
> > > 
> > > How does the server tell the difference between talking to another
> > > server (which is acting as client) and what you call a "client"?
> > 
> > It doesn't, but operation is quite different.  MTA's typically
> > require no login on port 25, but only allow messages to be sent to
> > domains it serves (otherwise it quickly becomes a spam server).
> > Port 587 requires a login, but allows messages to be relayed to any
> > domain.
> 
> Would I be correct in thinking MTAs only talk to each other over port
> 25?
> 
> Would I also be right that using port 587 mandates authentication
> whereas with port 25 it is optional?
> 
> > Now, for historic reasons, some MTA's still allow login on port 25
> > (either directly or some indirect method like accessing a POP or
> > IMAP account before sending).  But these are becoming fewer and
> > fewer.
> 
> Port 25 then becomes used only for incoming messages to be sent to
> domains the server is responsible for? If so, that doesn't appear any
> different from the present situation. For relaying a login is
> perfectly understanable, but it can be done on port 25 too. What
> makes port 587 necessary?

Simply to provide a standard port on which authentication is expected
and used, leaving 25 for unauthenticated mail. An email sent to an
arbitrary address will be unauthenticated, because none of us have
authentication credentials for all the world's mail servers.
Unauthenticated mail will be delivered only *to* the domains the
receiving server is authoritative for, or relayed *to* anywhere, but
only *from* domains which are explicitly configured in the server. I
think the very basic Debian setup of exim4 allows the entry of such
permitted relaying domains, and certainly the full configuration file(s)
does so.
> 
> All my mail from home is sent directly using exim which, as far as I
> can make out will only send on port 25. Leaving aside what you say
> below (my ISP does not block outgoing port 25 traffic) I should not
> be affected? 
> > BTW, many ISP's have blocked outgoing port 25 connections
> > (especially on residential accounts) because there are a lot of
> > trojans out there which will install a minimal MTA on a user's
> > machine, unbeknownst to the user. This allows spammers to use the
> > compromised machine to be a spam source, hiding the real source of
> > the spam.

Almost as good is for ISPs to refuse to create proper PTR records for
domestic IP addresses. The vast majority of spam rejected by my server
comes from IP addresses which do not have a complementary PTR-A record
pair in public DNS, and this is a test which just about all SMTP servers
carry out on incoming mail. Virtually all the spam that does get
through comes from Google and Yahoo mail servers, and from 'business'
mail hosting accounts with random domain names set up purely for the
distribution of spam, which is presumably economic to do.

An effective further step is to accept email only for legitimate users
of the receiving domain, and not just @domain.com. The large
majority of spam I see is sent to obviously made-up user names on my
domains, and my server would reject those connections if the DNS check
hadn't already done so. This is NDR spam, which relies on a SMTP server
accepting such mail, then the mail being refused by a subsequent
server or remaining uncollected by clients. The SMTP server which was
fooled now has to issue an NDR, sent to a forged sender address, now
coming from a fairly legitimate mail server and therefore being more
likely to be delivered to the real target, the forged sender address.
The NDR does, of course, contain the entire spam message. If all SMTP
servers accepted mail only for a set of named users, NDR spam could be
eliminated.

> 
> So, in world where every ISP blocks outgoing port 25 connections the
> delivering of one's own mail becomes impossible. The flow of spam and
> malware across the net will continue to increase though, I suppose.
> 
> 
That's supposedly the main distinction between domestic and business
Internet accounts, that business accounts don't block ports and do
permit the use of public Internet servers such as SMTP servers. Most
domestic accounts explicitly forbid server operation. In many countries,
business accounts are expensive or unavailable, and even in the UK,
'business' accounts tend to cost a fair bit more.

But ultimately, whatever TCP port number is used, it is impossible to
distinguish a spammer from a legitimate sender of email. We can't tell
spammers not to use 587, nor that they aren't permitted to use the
hijacked computer's TLS credentials, if any. DNS tests are currently
more reliable than blocking ports, though I do know two small-ish
businesses in the UK who use third-party mail services with incorrectly
setup DNS. I've told them a couple of times, but there is ev

Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 16:08:44 -0400, Jerry Stuckle wrote:

> On 7/28/2014 3:51 PM, Brian wrote:
> > On Mon 28 Jul 2014 at 21:08:02 +0200, Slavko wrote:
> > 
> >> Dňa Mon, 28 Jul 2014 19:57:52 +0100 Brian 
> >> napísal:
> >>
> >>> Do you really mean "criminal"? Which countries are these which
> >>> criminalise looking at something which is in a public place? Walking
> >>> round with my eyes closed and my brain closed down isn't an attracive
> >>> prospect.
> > 
> > You never really answered my questiom. If you place something in a
> > public place, a mailserver, for example, why should it be a criminal
> > offence to look at it. If you did not want it to be seen you have the
> > solution at hand.
> >  
> 
> If your car is in a public parking lot, does that mean I can get in and
> drive it off?

I never said that you could. I guess that would be unacceptable in every
country except in the most extenuating of circumstances.

I was talking about looking at something. How do you send (or not send,
as the case may be) email through a server if you do not look at it?

  brian@desktop:~$ telnet smtp.verizon.net 25
  Trying 206.46.232.100...
  telnet: Unable to connect to remote host: Connection timed out

  brian@desktop:~$ telnet smtp.verizon.net 465
  Trying 206.46.232.100...
  Connected to smtp.verizon.net.
  Escape character is '^]'.

Now I know the smarthost setting in exim requires port 465.

Anything wrong with this? Is nmap more or less evil?


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728212705.gd19...@copernicus.demon.co.uk



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Joe
On Mon, 28 Jul 2014 21:56:50 +0100
Brian  wrote:

> On Mon 28 Jul 2014 at 16:05:11 -0400, Jerry Stuckle wrote:
> 
> > On 7/28/2014 1:16 PM, Brian wrote:
> > 
> > > All my mail from home is sent directly using exim which, as far
> > > as I can make out will only send on port 25. Leaving aside what
> > > you say below (my ISP does not block outgoing port 25 traffic) I
> > > should not be affected? 
> > 
> > Exim can use other ports also.  It's all in the configuration. (but
> > sorry, I do not have enough expertise to tell you exactly how to do
> > it).
> 
> Exim will definitely *receive* mail on multiple ports; that much I do
> know. Sending on other than port 25 would appear to contradict the
> idea that MTAs only communicate over port 25. But I'll look into it.
> 

You can do nearly anything you can imagine with exim4. It has 'routers'
to deal differently with different sending and receiving domains (and
pretty much any other aspect of a message it is given), and 'transports'
which specify how the message is to be handled, SMTP being one
alternative. You set up a transport to deal with a particular remote
server, then a router to identify the mail to be sent there. You can
have an arbitrary number of smarthosts handling different domains, or
send directly to some domains, all other mail going via a smarthost,
etc. The routers have to be in a particular order, the transports don't.

Here are a router and transport I used for sending to a smarthost, years
ago, for all mail to a set of sub-domains. I no longer have any domain
names hosted here, so I've left in the mail host's name and server
details. Here also is the skeleton conf.d/passwd.client file where
server logon credentials are saved.



#
### router/200_exim4-config_primary
#

### router/200_exim4-config_primary
#
# This file holds the primary router, responsible for nonlocal mails

.ifdef DCconfig_internet
# configtype=internet
#
# deliver mail to the recipient if recipient domain is a domain we
# relay for. We do not ignore any target hosts here since delivering to
# a site local or even a link local address might be wanted here, and if
# such an address has found its way into the MX record of such a domain,
# the local admin is probably in a place where that broken MX record
# could be fixed.

#mydomain:
  debug_print = "R: mydomain for $local_part@$domain"
  driver = manualroute
  domains = *.mydomain.co.uk
  transport = oneandone_auth_smtp
  route_list = * auth.smtp.1and1.co.uk





### transport/30_exim4-config_remote_smtp_smarthost
#

# This transport is used for delivering messages over SMTP connections
# to a smarthost. The local host tries to authenticate.
# This transport is used for smarthost and satellite configurations.

remote_smtp_smarthost:
  debug_print = "T: remote_smtp_smarthost for $local_part@$domain"
  driver = smtp
  hosts_try_auth = <; ${if exists{CONFDIR/passwd.client} \
{\
${lookup{$host}nwildlsearch{CONFDIR/passwd.client}{$host_address}}\
}\
{} \
  }
.ifdef REMOTE_SMTP_SMARTHOST_HOSTS_AVOID_TLS
  hosts_avoid_tls = REMOTE_SMTP_SMARTHOST_HOSTS_AVOID_TLS
.endif
.ifdef REMOTE_SMTP_HEADERS_REWRITE
  headers_rewrite = REMOTE_SMTP_HEADERS_REWRITE
.endif
.ifdef REMOTE_SMTP_RETURN_PATH
  return_path = REMOTE_SMTP_RETURN_PATH
.endif
.ifdef REMOTE_SMTP_HELO_FROM_DNS
  helo_data=REMOTE_SMTP_HELO_DATA
.endif

oneandone_auth_smtp:
  debug_print = "T: oneandone_auth_smtp for $local_part@$domain"
  driver = smtp
  hosts_require_auth = auth.smtp.1and1.co.uk
  port = 587



#
### end transport/30_exim4-config_remote_smtp_smarthost
#




/etc/exim4/conf.d/passwd.client:

# password file used when the local exim is authenticating to a remote
# host as a client.
#
# see exim4_passwd_client(5) for more documentation
#
# Example:
### target.mail.server.example:login:password


-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728224519.53f93...@jretrading.com



Re: Does anyone have mimic-tools1.0.1.deb package?

2014-07-28 Thread Martin T
Hi,

thank you for the reply, but looks the mimic-tools1.0.1.deb
installation package has never been in official Debian repositories.



regards,
Martin

On Tue, Jul 29, 2014 at 12:10 AM, Andrei POPESCU
 wrote:
> On Lu, 28 iul 14, 11:49:44, Martin T wrote:
>> Hi,
>>
>> aMSN(free open source MSN Messenger clone) allowed one to store
>> web-cam sessions, but saved those into cam files. There is an utility
>> called mimic2rgb which allows one to convert those cam files into RGB
>> video stream. At some point, there even were some Debian packages
>> around(mimic-tools1.0.1.deb) which contained the mimic2rgb utility.
>> However, at nowadays, it seems nearly impossible to find the Debian
>> package(mimic-tools1.0.1.deb) or the source
>> tarball(mimictools-1.0.1.tar.gz). Does anyone have an old repo
>> mirrored somewhere which still has this package? However, I'm not sure
>> if this package has ever been in any official repository..
>
> If it was you can find it on snapshot.debian.org.
>
> Kind regards,
> Andrei
> --
> http://wiki.debian.org/FAQsFromDebianUser
> Offtopic discussions among Debian users and developers:
> http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
> http://nuvreauspam.ro/gpg-transition.txt


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAJx5YvHuRKW==03PK4STHXiE10wtQ0v4J7SD=ogMtvarb=z...@mail.gmail.com



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Joe
On Mon, 28 Jul 2014 21:38:37 +0100
Brian  wrote:

> On Mon 28 Jul 2014 at 22:00:00 +0200, Slavko wrote:
> 
> > Dňa Mon, 28 Jul 2014 20:51:31 +0100 Brian 
> > napísal:
> > 
> > > You never really answered my questiom. If you place something in a
> > > public place, a mailserver, for example, why should it be a
> > > criminal offence to look at it. If you did not want it to be seen
> > > you have the solution at hand.
> > 
> > Yes, i provided answer to you. I try it again: If is something in
> > public place, it doesn't mean, that anybody can do anything with it.
> 
> You are stating the obvious.
> 
> I'll try a more technical answer. Remember, you were of the opinion
> that using nmap could be a criminal offence in some countries (which
> you declined to name).
> 
> I will use my preferred email client (telnet) for this test.
> 
>   brian@desktop:~$ telnet mail.o2.co.uk 25
>   Trying 82.132.141.69...
>   Connected to mail.o2.co.uk.
>   Escape character is '^]'.
>   220 mail.o2.co.uk ESMTP Service ready
> 
> 
>   brian@desktop:~$ telnet mail.o2.co.uk 587
>   Trying 82.132.141.69...
>   telnet: Unable to connect to remote host: Connection timed out
> 
> 
> I also used another 40.000 ports.
> 
> Happpier with this?
> 
> Communication is one of the most basic human needs. Have I
> transgressed its boundaries?
> 
> 

Not as far as it goes. I occasionally use telnet to a mail server to
check an email address is valid. That's a legitimate SMTP function to
use anonymously, and many email clients use it to verify an address
while you're composing an email. But if you got a reply on 587 and then
tried guessing user names and passwords, knowing you didn't have an
account there, I think you would be attempting to gain unauthorised
access to a computer system, which is an offence in some countries.

And SMTP and HTTP are protocols normally accessed anonymously, as FTP
can be. Other protocols, such as SSH and RDP are never accessible
anonymously, they always require an account on the server, and it could
be argued that any connection attempts to such ports were 'attempting
to gain...' Also, the use of malformed connection packets can sometimes
gain access to vulnerabilities in servers, and such behaviour would
seem to fall foul of the definition. nmap can certainly be used to
try to identify the OS in use by a server, and perhaps try to see
some details of the network behind the firewall, which again would not
seem to be legitimate things to do. It's not clear cut, but some
behaviours would appear to be legitimate, and some not.

-- 
Joe


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728230432.01a73...@jretrading.com



Re: Latest Jessie doesn't respond to /etc/default/tmpfs "RAMTMP=yes"

2014-07-28 Thread Michael Biebl
Am 28.07.2014 22:00, schrieb Andrei POPESCU:
> On Du, 27 iul 14, 17:31:37, Rick Thomas wrote:
>>
>> I still can’t figure out how to exercise control over the size and 
>> other mount options, the way I used to be able to do under sysvinit 
>> using options in /etc/default/tmpfs .
> 
> Create /etc/systemd/system/tmp.mount with something like:
> 
> .include /lib/systemd/system/tmp.mount
> [Mount]
> Options=... (your options)

Just a quick comment:
.include is discouraged nowadays. The recommended way is to use drop-in
snippets. So, please don't use ".include" anymore!

As for drop-ins, see [1]

* Configuration of unit files may now be extended via drop-in
  files without having to edit/override the unit files
  themselves. More specifically, if the administrator wants to
  change one value for a service file foobar.service he can
  now do so by dropping in a configuration snippet into
  /etc/systemd/systemd/foobar.service.d/*.conf. The unit logic
  will load all these snippets and apply them on top of the
  main unit configuration file, possibly extending or
  overriding its settings. Using these drop-in snippets is
  generally nicer than the two earlier options for changing
  unit files locally: copying the files from
  /usr/lib/systemd/system/ to /etc/systemd/system/ and editing
  them there; or creating a new file in /etc/systemd/system/
  that incorporates the original one via ".include". Drop-in
  snippets into these .d/ directories can be placed in any
  directory systemd looks for units in, and the usual
  overriding semantics between /usr/lib, /etc and /run apply
  for them too.


In this particular case that would mean creating a directory
/etc/systemd/system/tmp.mount.d/, then placing a .conf file in there
setting your custom options.


That all said, using /etc/fstab is perfectly fine if you need to tweak
the /tmp tmpfs settings.

An entry from /etc/fstab will override any existing tmp.mount unit.





[1]
http://lists.freedesktop.org/archives/systemd-devel/2013-March/009496.html

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Brian
On Mon 28 Jul 2014 at 17:05:56 -0400, Jerry Stuckle wrote:

> On 7/28/2014 4:56 PM, Brian wrote:
> > 
> > Exim will definitely *receive* mail on multiple ports; that much I do
> > know. Sending on other than port 25 would appear to contradict the idea
> > that MTAs only communicate over port 25. But I'll look into it.
> >
> 
> Yes and no.  There is also an concept of "smart host" (I don't know if
> this is exim only), where all outgoing mail is routed through a
> different host.  It's quite often used in large companies, for instance,
> where an MTA receives all mail from users and delivers locally.  This
> server is not directly accessible via the internet; rather another MTA
> handles all traffic in and out of the network.
> 
> But the main thought here is - you shouldn't be running a local mail
> server on a residential account.  There really is no need for it
> (business accounts are different).

You would have to explain that very, very carefully to me. Nobody who is
not part of a corporate environment is allowed to deliver their own
mail? I am not permitted to have the freedom to communicate in whatever
way I want because I live in a house and do not work in a office? Is
that in an RFC? You are telling me there is no need to pop a letter
though the letterbox of the house next door because I can get Royal Mail
to do it for me?

> > If exim cannot send over port 587. And how do I know the mail
> > server I'm connecting to is accepting on port 587? I don't think mine
> > does; I'll have to check. I'm provisionally of the same opinion as
> > expressed above; the flow of communication is controlled.
> > 
> 
> I never said Exim cannot send over port 587.  In fact, I said just the
> opposite.  I just don't know enough about Exim configuration to provide
> the details.
> 
> But then if you have residential service, there really is no need to
> have your own MTA (other than you want it).

I want to. When I go to relatives in London I want to take parcelled up
birthday presents with me rather than entrust them to DHL. Of course, I
needn't - but I want to.

> And even if you do have your own MTA, it doesn't help that much.  When
> you send a message, all your MTA can do is tell you if the message was
> accepted by the destination MTA.  Using a remote MTA will do the same thing.

You are guaranteeing the remote MTA will have 100% uptime and sends
mails and non-delivery messages in a timely fashion? And yes, knowing
the mail was accepted by the destination MTA is important; when someone
says they haven't received a mail from me I can demonstrate otherwise.
 
> One other thing - if you have a dynamic IP address, none of the servers
> I maintain will ever accept your email.  Dynamic IPs are specifically
> blocked due to spam problems.  That is also becoming more and more common.

Dynamic IP = spam senders. What's that? 80%. 90% of the people on the
internet. Disenfranchisement on a massive scale. O brave new world, That
has such people in't.
 
> > I don't need or want protecting from myself. I'll go to hell in my own
> > way. :)
> 
> The problem is it's not YOU who suffers if your machine is compromised.
>  It is the rest of the internet.

Compromised? No need to worry; everything is in capable hands. Unlike
the large ISP networks which harbour spam bots.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140728223600.ge19...@copernicus.demon.co.uk



systemd unable to enter emergeny mode (and failing to skip mount)

2014-07-28 Thread Redalert Commander
Hi,

Yet another thing I now stumbled upon with systemd (I really don't
mean to bash it, but now I'm getting tempted). I have a raid 10 BTRFS
array, and 1 drive failed, so I want to replace it.
I physically replaced the disk, but now I can't get past this next hurdle.

Because of an entry about that array in /etc/fstab, systemd does not
proceed to boot properly. I get the 'recovery mode' dialog about
password and Ctr-D, but neither seems to work, so I can't edit fstab
to boot up further. It won't accept my password (worked fine 2 days
ago).

Also, I don't get dropped into recovery mode when using the default
grub entry, but only with the 'recovery mode' entry. I do get the
'Welcome to emergency mode' message, but nothing about Ctrl-D or the
root password.

Any ideas besides booting from external boot media?

Also, I think the 90 second timeout is just wrong, the mount fails
because the array is degraded, it should return immediately (but still
drop to recovery mode) since a 'mount' command would also return
immediately.

Does anyone experiences similar things, and how do you deal with it?

Best regards,
Steven


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAMDu+mO2L=gcm1zdsftob2g1bftuywtmtehxfeemdhpohyn...@mail.gmail.com



Re: systemd unable to enter emergeny mode (and failing to skip mount)

2014-07-28 Thread Redalert Commander
Fixed, see below.

2014-07-29 0:22 GMT+02:00 Redalert Commander :
> Yet another thing I now stumbled upon with systemd (I really don't
> mean to bash it, but now I'm getting tempted). I have a raid 10 BTRFS
> array, and 1 drive failed, so I want to replace it.
> I physically replaced the disk, but now I can't get past this next hurdle.
>
> Because of an entry about that array in /etc/fstab, systemd does not
> proceed to boot properly. I get the 'recovery mode' dialog about
> password and Ctr-D, but neither seems to work, so I can't edit fstab
> to boot up further. It won't accept my password (worked fine 2 days
> ago).
>
> Also, I don't get dropped into recovery mode when using the default
> grub entry, but only with the 'recovery mode' entry. I do get the
> 'Welcome to emergency mode' message, but nothing about Ctrl-D or the
> root password.
>
> Any ideas besides booting from external boot media?

When specifying init=/bin/sh on the kernel command line in grub,
I can boot into a shell, remount the root filesystem as rw (it's
mounted ro when doing this),
and edit /etc/fstab.
After commenting out the array from fstab, systemd let me boot up
normally so I can fix the array.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAMDu+mOTB_aZPXOffAw=k7gnddfunv3jef0tirkmshnqqmh...@mail.gmail.com



Re: capitalone banking website compatibility with iceweasel

2014-07-28 Thread Marc Auslander
Ok - to firefox 101.  Try in safe mode and see if the problem
persists.  If it doesn't, you have an add-in that's causing the
problem.

As for your bookmarks etc - you can always find your profile with
about:support if you don't know where is is.

You can save the whole profile directory using normal unix stuff and
then copy it over the profile of firefox to get back all your setting.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87tx612ih4@aptiva.optonline.net



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Jerry Stuckle
On 7/28/2014 6:36 PM, Brian wrote:
> On Mon 28 Jul 2014 at 17:05:56 -0400, Jerry Stuckle wrote:
> 
>> On 7/28/2014 4:56 PM, Brian wrote:
>>>
>>> Exim will definitely *receive* mail on multiple ports; that much I do
>>> know. Sending on other than port 25 would appear to contradict the idea
>>> that MTAs only communicate over port 25. But I'll look into it.
>>>
>>
>> Yes and no.  There is also an concept of "smart host" (I don't know if
>> this is exim only), where all outgoing mail is routed through a
>> different host.  It's quite often used in large companies, for instance,
>> where an MTA receives all mail from users and delivers locally.  This
>> server is not directly accessible via the internet; rather another MTA
>> handles all traffic in and out of the network.
>>
>> But the main thought here is - you shouldn't be running a local mail
>> server on a residential account.  There really is no need for it
>> (business accounts are different).
> 
> You would have to explain that very, very carefully to me. Nobody who is
> not part of a corporate environment is allowed to deliver their own
> mail? I am not permitted to have the freedom to communicate in whatever
> way I want because I live in a house and do not work in a office? Is
> that in an RFC? You are telling me there is no need to pop a letter
> though the letterbox of the house next door because I can get Royal Mail
> to do it for me?
>

No RFC - and no RFC is required.  ISPs are free to set their own rules
on how they run their own systems.  If you don't like it, you can find
another ISP.

But they also are not in any violation of any RFC's.  No RFC says they
have to provide port 25 connectivity to your system.


>>> If exim cannot send over port 587. And how do I know the mail
>>> server I'm connecting to is accepting on port 587? I don't think mine
>>> does; I'll have to check. I'm provisionally of the same opinion as
>>> expressed above; the flow of communication is controlled.
>>>
>>
>> I never said Exim cannot send over port 587.  In fact, I said just the
>> opposite.  I just don't know enough about Exim configuration to provide
>> the details.
>>
>> But then if you have residential service, there really is no need to
>> have your own MTA (other than you want it).
> 
> I want to. When I go to relatives in London I want to take parcelled up
> birthday presents with me rather than entrust them to DHL. Of course, I
> needn't - but I want to.
> 

Completely immaterial.

>> And even if you do have your own MTA, it doesn't help that much.  When
>> you send a message, all your MTA can do is tell you if the message was
>> accepted by the destination MTA.  Using a remote MTA will do the same thing.
> 
> You are guaranteeing the remote MTA will have 100% uptime and sends
> mails and non-delivery messages in a timely fashion? And yes, knowing
> the mail was accepted by the destination MTA is important; when someone
> says they haven't received a mail from me I can demonstrate otherwise.
>  

If they are a good ISP, then they will have higher uptime than you do!
And even if they are down - your local system will tell you and you can
try again later.

But you also seem to think that just because the remote MTA accepted the
email the user got it.  That is not necessarily so - for a lot of
reasons.  For instance, many MTA's will silently drop emails to a bad
address rather than rejecting them.  It makes it much harder for a
spammer to discover whether an email is valid or not.

>> One other thing - if you have a dynamic IP address, none of the servers
>> I maintain will ever accept your email.  Dynamic IPs are specifically
>> blocked due to spam problems.  That is also becoming more and more common.
> 
> Dynamic IP = spam senders. What's that? 80%. 90% of the people on the
> internet. Disenfranchisement on a massive scale. O brave new world, That
> has such people in't.
>

That's the way it is.  There is a significant amount of spam sent from
compromised residential machines.  These are almost always on dynamic
IPs.  Like it or not - that's the way it is.

>>> I don't need or want protecting from myself. I'll go to hell in my own
>>> way. :)
>>
>> The problem is it's not YOU who suffers if your machine is compromised.
>>  It is the rest of the internet.
> 
> Compromised? No need to worry; everything is in capable hands. Unlike
> the large ISP networks which harbour spam bots.
> 
> 

Then prove it to your ISP.  And please name "the large ISP networks
which harbor spam bots".

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d6d9b8.1090...@attglobal.net



Re: Finding a replacement for my ISP's smtp server

2014-07-28 Thread Jerry Stuckle
On 7/28/2014 5:27 PM, Brian wrote:
> On Mon 28 Jul 2014 at 16:08:44 -0400, Jerry Stuckle wrote:
> 
>> On 7/28/2014 3:51 PM, Brian wrote:
>>> On Mon 28 Jul 2014 at 21:08:02 +0200, Slavko wrote:
>>>
 Dňa Mon, 28 Jul 2014 19:57:52 +0100 Brian 
 napísal:

> Do you really mean "criminal"? Which countries are these which
> criminalise looking at something which is in a public place? Walking
> round with my eyes closed and my brain closed down isn't an attracive
> prospect.
>>>
>>> You never really answered my questiom. If you place something in a
>>> public place, a mailserver, for example, why should it be a criminal
>>> offence to look at it. If you did not want it to be seen you have the
>>> solution at hand.
>>>  
>>
>> If your car is in a public parking lot, does that mean I can get in and
>> drive it off?
> 
> I never said that you could. I guess that would be unacceptable in every
> country except in the most extenuating of circumstances.
>

So is port scanning, in many countries.

> I was talking about looking at something. How do you send (or not send,
> as the case may be) email through a server if you do not look at it?
> 

Even trying to open the door on your car (to see if it is locked) can be
breaking and entering, whether or not you took something.

>   brian@desktop:~$ telnet smtp.verizon.net 25
>   Trying 206.46.232.100...
>   telnet: Unable to connect to remote host: Connection timed out
> 
>   brian@desktop:~$ telnet smtp.verizon.net 465
>   Trying 206.46.232.100...
>   Connected to smtp.verizon.net.
>   Escape character is '^]'.
> 
> Now I know the smarthost setting in exim requires port 465.
>

That is the way the default is set up.  But it is not cast in concrete;
it is a configuration parameter.

> Anything wrong with this? Is nmap more or less evil?
> 
> 

As others have said - in some countries it is illegal - just like trying
to open your car door (or a window on your house).

Which also begs the question - why would you need to do a port scan on
your ISP?  That's what help files are for.

You seem to think anything on the internet is there for your personal
benefit.  That is NOT the case.

Jerry


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d6db00.40...@attglobal.net



Re: Latest Jessie doesn't respond to /etc/default/tmpfs "RAMTMP=yes"

2014-07-28 Thread Rick Thomas

On Jul 28, 2014, at 1:00 PM, Andrei POPESCU  wrote:

> As a side note, I'd also be interested in the reasons for the default 
> options set by the systemd tmp.mount unit (mode=1777,strictatime), a 
> superficial web search did not find anything.

Just a guess…

mode=1777 sets all accesses allowed (it is “/tmp” after all…) and also sets the 
“sticky bit” which (according to stat(2)) “on a directory means that a file in 
that directory can be renamed or deleted only by the owner of the file, by the 
owner of the directory, and by a privileged process.”

“strictatime” (according to mount(8)) "Allows  to explicitly requesting full 
atime updates. This makes it possible for kernel to defaults to reltime or 
native but still allow userspace to override it.”

So in an embedded system with root on flash, but /tmp in RAM, we get standard 
semantics for atime (no need to be nice to flash since the whole filesystem is 
in RAM) and the usual expected behavior for deletion/rename operations in /tmp.

It’s what I would have done, if I had thought about the issue.  In general, I’m 
glad there are so many nice folks out there thinking about these issues, so I 
don’t have to!  (-;

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/0826730e-604c-45fe-bac5-aaa5d4aad...@pobox.com



Re: Latest Jessie doesn't respond to /etc/default/tmpfs "RAMTMP=yes"

2014-07-28 Thread Rick Thomas

On Jul 28, 2014, at 3:16 PM, Michael Biebl  wrote:

> In this particular case that would mean creating a directory
> /etc/systemd/system/tmp.mount.d/, then placing a .conf file in there
> setting your custom options.
> 
> 
> That all said, using /etc/fstab is perfectly fine if you need to tweak
> the /tmp tmpfs settings.
> 
> An entry from /etc/fstab will override any existing tmp.mount unit.

so I would:

mkdir /etc/systemd/system/tmp.mount.d/
echo “[Mount]” > /etc/systemd/system/tmp.mount.d/tmp.mount.conf
echo “Options=mode=1777,strictatime,size=20%” > 
/etc/systemd/system/tmp.mount.d/tmp.mount.conf

then reboot.

Right?  I tried this and it seems to work…

Rick


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/9c781fba-35d9-404a-b822-59d89ca70...@pobox.com



Re: Latest Jessie doesn't respond to /etc/default/tmpfs "RAMTMP=yes"

2014-07-28 Thread Michael Biebl
Am 29.07.2014 01:59, schrieb Rick Thomas:

> so I would:
> 
>   mkdir /etc/systemd/system/tmp.mount.d/
>   echo “[Mount]” > /etc/systemd/system/tmp.mount.d/tmp.mount.conf
>   echo “Options=mode=1777,strictatime,size=20%” > 
> /etc/systemd/system/tmp.mount.d/tmp.mount.conf

The file name is arbitrary, the only requirement is, that it has a .conf
extension. You can also have more then one drop-in conf files.

So naming it size.conf or local.conf would be more natural to me.
But in the end, that's just cosmetics.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



signature.asc
Description: OpenPGP digital signature


Re: Does anyone have mimic-tools1.0.1.deb package?

2014-07-28 Thread koanhead
On 07/28/2014 02:50 PM, Martin T wrote:
> Hi,
> 
> thank you for the reply, but looks the mimic-tools1.0.1.deb
> installation package has never been in official Debian repositories.

Here's a thread on it at the aMSN forums. It has links to both source
tarballs and .deb files, but those links are 404'd. You might try
contacting the author or some of the others in that thread to see if
they are still using it and can provide you with sources.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/lr6o3d$v0i$1...@news.albasani.net



Re: vps supporting debian dist-upgrade.

2014-07-28 Thread Tony Baldwin
On Mon, Jul 28, 2014 at 10:07:06PM +0300, Alexandros Prekates wrote:
> My vps provider informed (after me having trouble upgrading to wheezy)
> that such upgrades are unsupported and the suggest to switch to a new
> server.
> 
> My question is if that kind of support is really difficult to find , or
> is it inhereted in the technology used for virtualization so i could
> easily find it elsewhere.
> 
> Could the community help me giving me some guide what to check for in
> searching for that king of support.
> 
> aprekates
> 

I'm hosting stuff at contabo.com and have full control of my server.
I upgraded it from squeeze to wheezy, etc.
I don't see how such a thing can be "unsupported" if you have shell
access. If you don't have shell access, your hosting provider sucks.

tony
-- 
http://www.myownsite.me
web design, development and hosting


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140729001853.ga10...@myownsite.me



Re: 90-second timeout during boot -- interaction between systemd and encrypted disk with LVM root/swap/home

2014-07-28 Thread Rick Thomas

On Jul 28, 2014, at 3:32 AM, Michael Biebl  wrote:

> Am 28.07.2014 10:54, schrieb Rick Thomas:
>> In my continuing quest for enough understanding of systemd to be able to 
>> actually use it in real-life situations, I’ve set up a VM running the latest 
>> Jessie release.  In the spirit of experimentation, I set it up with root, 
>> swap and home as LVs on an encrypted PV.  In a real-world situation, I’d 
>> have the key for the encrypted PV on a USB-stick, so I gave the VM a small 
>> (1GB) ext2 disk with just a key file on it.  The /etc/crypttab file looks 
>> like this:
>> 
>>   sda5_crypt UUID=e2bd09e9-9e01-484a-99f7-9a0b5d8a2bc3 
>> /dev/disk/by-label/KEY:/key luks,keyscript=/lib/cryptsetup/scripts/passdev
> 
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=618862

OK, I guess understand the problem.  I sure hope this bug gets fixed before 
Jessie is released!  Good luck to David Härdeman and you in your work to fix it!

Rick

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/71d31a9a-c239-48d1-a5c4-f5c3fe319...@pobox.com



Re: pkexec hangup on wheezy armhf

2014-07-28 Thread 柳永峰
> On Fri, 11 Jul 2014 05:25:04 +0800
> 柳永峰  wrote:
>
> > When i run
> > pkexec find /
> >
> > I typed the correct password, the output is
> >
> > /
> > Hangup
> >
> > I googled a bit but not find an answer. What's the possible reason
> > for this problem?
>
> This doesn't answer your question, I'm just curious: why not sudo,
> assuming the user you want is root?
>
> SteveT
>
> Steve Litt*  http://www.troubleshooters.com/
> Troubleshooting Training  *  Human Performance
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmas...@lists.debian.org
> Archive:
> https://lists.debian.org/20140716115429.0e654...@mydesq2.domain.cxm
>
>
There are some xxx-pkexec software in debian, It's a general problem for
all these softwares, I just show an example.

BTW. I finally confirmed this problem is related to systemd somehow, when i
switch to sysvinit, the problem disappeared, and if i use systemd, problem
appeared again.


Re: Pin package to "any version, don't remove"?

2014-07-28 Thread The Wanderer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 07/28/2014 03:43 PM, Andrei POPESCU wrote:

> On Du, 27 iul 14, 16:07:34, The Wanderer wrote:
> 
>> On 07/20/2014 09:10 AM, Andrei POPESCU wrote:
>> 
>> Yes, even with 'Priority: essential'. Possibly that's a side effect
>> of something else (the default of 'Section: misc', maybe?), but I
>> have nothing to really support that idea.
> 
> Essential is not a priority, but a separate field:
> 
> Essential: yes

Oh, right, that slipped my mind.

I just now tried that as well (in combination with 'Priority:
required'), and it produced the same result: apt-get wanted to remove
the metapackage on dist-upgrade.

- --
   The Wanderer

Secrecy is the beginning of tyranny.

A government exists to serve its citizens, not to control them.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=EWu9
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53d70b5c.6070...@fastmail.fm



sound problem debian wheezy

2014-07-28 Thread tom arnall
Two weeks ago I installed Debian wheezy and was using pulse audio with
good results. Then suddenly the external mic wasn't working. I removed
pulse from the system and the process seemed to have made alsa the
sound system. I also added some alsa stuff. The commands for this:

sudo apt-get purge pulseaudio pulseaudio-utils
gstreamer0.10-pulseaudio libpulse-browse0 paman pavumeter pavucontrol

sudo rm /etc/asound.conf

rm ~/.pulse-cookie

rm -fR ~/.pulse

sudo apt-get install alsa-base alsa-tools\
   alsa-tools-gui alsa-utils alsa-oss\
   alsamixergui libalsaplayer0

Still no external mic. By 'external mic' I mean the one I plug into
the round port, not a USB mic.

The machine is a lenovo t400

I checked that the hardware is ok by using it under windows dual-boot.

I am sure that people need more info than this, but I have no idea
what that info might be.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAFKYrxoC=HJJ5Pw=0yzpstkeksy3xmsadfkrjsbdx0dce5r...@mail.gmail.com



Re: capitalone banking website compatibility with iceweasel

2014-07-28 Thread Lisi Reisz
Sorry, John.  This was meant to go on list.

On Monday 28 July 2014 15:19:34 John Hasler wrote:
> Lisi writes:
> > I want to change [from Iceweasel] to Firefox, which can't be worse...
>
> It can't be any different.

Yes, it can.  It is a later version.

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201407290655.16485.lisi.re...@gmail.com