Re: sound vanished with a reboot?

[Gene Heskett]

On Sunday 22 March 2015 02:41:54 Lisi Reisz wrote:
> On Sunday 22 March 2015 06:12:48 Ric Moore wrote:
> > On 03/21/2015 10:12 PM, Gene Heskett wrote:
> > > Greetings audio guru's;
> > >
> > > All sound Except the new mail beep from kmail, vanished with the
> > > first reboot after 20 days uptime while dinking around with what
> > > was sold to me as a new 2Tb Toshiba drive, but which did not turn
> > > out to be a sealed box.  I do not think its related.
> > >
> > > Pursuant to someones suggestions, I installed pavuctl and
> > > pavumeter this morning early, but according to synaptic, that is
> > > the extent of the pulse install, no other pulse stuff is seen as
> > > installed by synaptic.  And of coarse, they don't work, no server.
> >
> > KDE has it's own notion of sound. Good luck! :0 Ric
>
> Gene is using TDE now.
>
> You don't mention it, Gene, but what about pulseaudio itself?

Not installed, never was IIRC.
>
> And is your sound card OK?  Perhaps run a live CD to check?

I tried that too, same failure, but I did find it, by doing something I 
haven't had to do in years, install  alsamixer and its gui, which showed 
that it had all turned itself off.  Turned it up, works.  Found the 
keyboard volume control didn't work until I had quit the alsamixer, they 
fought tooth and nail for control when the mixer was running.

Thanks Lisi

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503220410.46294.ghesk...@wdtv.com

Re: sound vanished with a reboot?

[Ric Moore]

On 03/22/2015 02:41 AM, Lisi Reisz wrote:

On Sunday 22 March 2015 06:12:48 Ric Moore wrote:

On 03/21/2015 10:12 PM, Gene Heskett wrote:

Greetings audio guru's;

All sound Except the new mail beep from kmail, vanished with the first
reboot after 20 days uptime while dinking around with what was sold to
me as a new 2Tb Toshiba drive, but which did not turn out to be a
sealed box.  I do not think its related.

Pursuant to someones suggestions, I installed pavuctl and pavumeter this
morning early, but according to synaptic, that is the extent of the pulse
install, no other pulse stuff is seen as installed by synaptic.  And of
coarse, they don't work, no server.


KDE has it's own notion of sound. Good luck! :0 Ric


Gene is using TDE now.


But he uses kmail. I bet it drug phonon, the KDE sound manager, into his 
mix.



You don't mention it, Gene, but what about pulseaudio itself?


he's not running the pulse server, he said. :) Ric


--
My father, Victor Moore (Vic) used to say:
"There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome." R.I.P. Dad.
http://linuxcounter.net/user/44256.html


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/550e8793.30...@gmail.com

Re: sound vanished with a reboot?

[Gene Heskett]

On Sunday 22 March 2015 05:12:51 Ric Moore wrote:
> On 03/22/2015 02:41 AM, Lisi Reisz wrote:
> > On Sunday 22 March 2015 06:12:48 Ric Moore wrote:
> >> On 03/21/2015 10:12 PM, Gene Heskett wrote:
> >>> Greetings audio guru's;
> >>>
> >>> All sound Except the new mail beep from kmail, vanished with the
> >>> first reboot after 20 days uptime while dinking around with what
> >>> was sold to me as a new 2Tb Toshiba drive, but which did not turn
> >>> out to be a sealed box.  I do not think its related.
> >>>
> >>> Pursuant to someones suggestions, I installed pavuctl and
> >>> pavumeter this morning early, but according to synaptic, that is
> >>> the extent of the pulse install, no other pulse stuff is seen as
> >>> installed by synaptic.  And of coarse, they don't work, no server.
> >>
> >> KDE has it's own notion of sound. Good luck! :0 Ric
> >
> > Gene is using TDE now.
>
> But he uses kmail. I bet it drug phonon, the KDE sound manager, into
> his mix.

Maybe.  But I see /opt/trinity/artsd running via htop.  No hint of phonon 
in that  171 item list.  But I see iceweasal went on a binge and cooked 
the cpu all night.  Thats another pet peeve. If I click the quit dot, 
the SOB should quit clean. About 10% of the time it doesn't. Buggier 
than a 10 day old carcass. But I can point that same finger and sharpen 
it like a schoolchild at firefox if it was installed.

My hearings direction finder isn't as good as it was even 20 years ago, 
and it was just last night that I discovered the kmail beep isn't mono 
on center, its either the pc's own speaker, or right channel only, and I 
strongly suspect its the pc's own speaker that is making the incoming 
mail beep.  From where I sit, the direction of the right speaker and the 
pc's speaker are in line but one is on the table and one is under the 
table.

That beep does not seem to be subject to the keyboard volume control to 
the extent it effects the main sound. That clue I'd throw it at the pc's 
speaker, however I just turn it down to 50%, a good 30 db down just to 
check that theory. It should have lowered the beep to inaudible, but its 
the same. So that has got to be the pc's speaker.

> > You don't mention it, Gene, but what about pulseaudio itself?
>
> he's not running the pulse server, he said. :) Ric
>
Correct.

Thanks all.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503220916.58913.ghesk...@wdtv.com

apt-get update W: A error occurred during the signature verification.

[David Christensen]

debian-user:

I've been seeing apt-get update failures lately:

2015-03-22 08:52:02 root@i72600s ~
# apt-get update
Hit http://approx wheezy Release.gpg
Get:1 http://approx wheezy-updates Release.gpg [836 B]
Hit http://approx wheezy/updates Release.gpg 


Hit http://approx wheezy Release
Get:2 http://approx wheezy-updates Release [124 kB]
Err http://approx wheezy-updates Release 



Hit http://approx wheezy/updates Release 
2015-03-22 08:52:02 root@i72600s ~

# apt-get update
Hit http://approx wheezy Release.gpg
Get:1 http://approx wheezy-updates Release.gpg [836 B]
Hit http://approx wheezy/updates Release.gpg 


Hit http://approx wheezy Release
Get:2 http://approx wheezy-updates Release [124 kB]
Err http://approx wheezy-updates Release 



Hit http://approx wheezy/updates Release 


Hit http://ftp.us.debian.org wheezy-backports Release.gpg
Hit http://ftp.us.debian.org wheezy-backports Release
Hit http://ftp.us.debian.org wheezy-backports/main amd64 Packages/DiffIndex
Hit http://ftp.us.debian.org wheezy-backports/main Translation-en/DiffIndex
Hit http://approx wheezy/main Translation-en
Hit http://approx wheezy/updates/main Translation-en
Hit http://approx wheezy/main Sources
Hit http://approx wheezy/main amd64 Packages
Hit http://approx wheezy/updates/main Sources
Hit http://approx wheezy/updates/main amd64 Packages
Fetched 125 kB in 2s (47.1 kB/s)
Reading package lists... Done
W: A error occurred during the signature verification. The repository is 
not updated and the previous index files will be used. GPG error: 
http://approx wheezy-updates Release: The following signatures were 
invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key 
(7.0/wheezy) 


W: Failed to fetch http://approx:/debian/dists/wheezy-updates/Release

W: Some index files failed to download. They have been ignored, or old 
ones used instead.



Hit http://ftp.us.debian.org wheezy-backports Release.gpg
Hit http://ftp.us.debian.org wheezy-backports Release
Hit http://ftp.us.debian.org wheezy-backports/main amd64 Packages/DiffIndex
Hit http://ftp.us.debian.org wheezy-backports/main Translation-en/DiffIndex
Hit http://approx wheezy/main Translation-en
Hit http://approx wheezy/updates/main Translation-en
Hit http://approx wheezy/main Sources
Hit http://approx wheezy/main amd64 Packages
Hit http://approx wheezy/updates/main Sources
Hit http://approx wheezy/updates/main amd64 Packages
Fetched 125 kB in 2s (47.1 kB/s)
Reading package lists... Done
W: A error occurred during the signature verification. The repository is 
not updated and the previous index files will be used. GPG error: 
http://approx wheezy-updates Release: The following signatures were 
invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key 
(7.0/wheezy) 


W: Failed to fetch http://approx:/debian/dists/wheezy-updates/Release

W: Some index files failed to download. They have been ignored, or old 
ones used instead.



2015-03-22 08:57:42 root@i72600s ~
# egrep -v '#' /etc/apt/sources.list
deb http://approx:/debian/  wheezy  main
deb http://ftp.us.debian.org/debian/wheezy-backportsmain
deb http://approx:/debian/  wheezy-updates  main
deb http://approx:/security/wheezy/updates  main
deb-src http://approx:/debian/  wheezy  main
deb-src http://approx:/debian/  wheezy-updates  main
deb-src http://approx:/security/wheezy/updates  main


2015-03-22 08:58:37 root@i72600s ~
# egrep -v '#' /etc/approx/approx.conf | grep .
debian  http://ftp.us.debian.org/debian/
securityhttp://security.debian.org/debian-security/


Is there a problem with my local Apt configuration, local Approx server, 
remote Apt mirror, or something else?



TIA,

David


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/550ee76a.9040...@holgerdanske.com

Re: sound vanished with a reboot?

[Lisi Reisz]

On Sunday 22 March 2015 09:12:51 Ric Moore wrote:
> On 03/22/2015 02:41 AM, Lisi Reisz wrote:
> > On Sunday 22 March 2015 06:12:48 Ric Moore wrote:
> >> On 03/21/2015 10:12 PM, Gene Heskett wrote:
> >>> Greetings audio guru's;
> >>>
> >>> All sound Except the new mail beep from kmail, vanished with the first
> >>> reboot after 20 days uptime while dinking around with what was sold to
> >>> me as a new 2Tb Toshiba drive, but which did not turn out to be a
> >>> sealed box.  I do not think its related.
> >>>
> >>> Pursuant to someones suggestions, I installed pavuctl and pavumeter
> >>> this morning early, but according to synaptic, that is the extent of
> >>> the pulse install, no other pulse stuff is seen as installed by
> >>> synaptic.  And of coarse, they don't work, no server.
> >>
> >> KDE has it's own notion of sound. Good luck! :0 Ric
> >
> > Gene is using TDE now.
>
> But he uses kmail. I bet it drug phonon, the KDE sound manager, into his
> mix.

No, he uses KMail-Trinity.  I'd be very surprised if it dragged in anything 
from KDE4.  I have kmail-trinity.

lisi@Tux-II:~$ aptitude show phonon
Package: phonon
State: not installed
Multi-Arch: same
Version: 4:4.6.0.0-3
Priority: optional
Section: sound
Maintainer: Debian Qt/KDE Maintainers 
Architecture: amd64

If Gene has phonon it is a hangover from KDE4 and nothing to do with his 
present kmail-trinity.

> > You don't mention it, Gene, but what about pulseaudio itself?
>
> he's not running the pulse server, he said. :) Ric

My point was, without pulseaudio what use is pavucontrol?  Why install 
pavucontrol when it is useless without pulseaudio?

Lisi


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503221633.34339.lisi.re...@gmail.com

Another problem is getting old

[Gene Heskett]

Greetings, iceweasal guru's;

Still the wheezy based install here.

What is the cause of my getting a refusal to go  look at what is supposed 
to be a news story, by iceweasal?

Instead of going to the link, its an error "413 Request entity too large"

There does not seem to be a likely candidate setting in about:config, 
nothing I see in the search results looks to be relevant.

Any idea how to fix that, or do I have to install firefox from the get 
firefox site?

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503221244.30044.ghesk...@wdtv.com

Re: searching for a "structure viewer" tool

[Fabrizio Carrai]

Maybe you can have a look at this wikipedia page:
http://en.wikipedia.org/wiki/Comparison_of_hex_editors

--
F.

2015-03-20 18:26 GMT+01:00 Sergey Spiridonov :

> Hi
>
> On 20/03/15 17:50, Renaud (Ron) OLGIATI wrote:
>
> >> I am looking for a tool which will allow to describe binary structure,
> >> some thing like
>
> > COBOL ?
>
> Well, it exists in Debian (as well as perl and gcc), but I will prefer
> something more specialized.
>
> --
> Sergey
>
>
>
> --
> To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmas...@lists.debian.org
> Archive: https://lists.debian.org/vq1utb-vuu@legba.gamic.com
>
>


-- 
*Fabrizio*

Re: searching for a "structure viewer" tool

[Sergey Spiridonov]

Hi

On 20.03.2015 15:56, Sergey Spiridonov wrote:


If found such a tool exists for MS Windows [1]. I remember there was
similar for MS DOS. Is there something like that for the Debian GNU/Linux?


[1]
http://www.hexworkshop.com/onlinehelp/500/html/idhelp_struct_overview.htm


Here [1] is similar tool written by author of HIEW for MS-DOS. You can 
run it in dosbox:


[1] ftp://ftp.sac.sk/sac/utilprog/stl430.zip

--
Best regards, Sergey Spiridonov



--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/memsb5$af6$1...@ger.gmane.org

Re: sound vanished with a reboot?

[Gene Heskett]

On Sunday 22 March 2015 12:33:34 Lisi Reisz wrote:
> On Sunday 22 March 2015 09:12:51 Ric Moore wrote:
> > On 03/22/2015 02:41 AM, Lisi Reisz wrote:
> > > On Sunday 22 March 2015 06:12:48 Ric Moore wrote:
> > >> On 03/21/2015 10:12 PM, Gene Heskett wrote:
> > >>> Greetings audio guru's;
> > >>>
> > >>> All sound Except the new mail beep from kmail, vanished with the
> > >>> first reboot after 20 days uptime while dinking around with what
> > >>> was sold to me as a new 2Tb Toshiba drive, but which did not
> > >>> turn out to be a sealed box.  I do not think its related.
> > >>>
> > >>> Pursuant to someones suggestions, I installed pavuctl and
> > >>> pavumeter this morning early, but according to synaptic, that is
> > >>> the extent of the pulse install, no other pulse stuff is seen as
> > >>> installed by synaptic.  And of coarse, they don't work, no
> > >>> server.
> > >>
> > >> KDE has it's own notion of sound. Good luck! :0 Ric
> > >
> > > Gene is using TDE now.
> >
> > But he uses kmail. I bet it drug phonon, the KDE sound manager, into
> > his mix.
>
> No, he uses KMail-Trinity.  I'd be very surprised if it dragged in
> anything from KDE4.  I have kmail-trinity.
>
> lisi@Tux-II:~$ aptitude show phonon
> Package: phonon
> State: not installed
> Multi-Arch: same
> Version: 4:4.6.0.0-3
> Priority: optional
> Section: sound
> Maintainer: Debian Qt/KDE Maintainers 
> Architecture: amd64
>
> If Gene has phonon it is a hangover from KDE4 and nothing to do with
> his present kmail-trinity.
>
> > > You don't mention it, Gene, but what about pulseaudio itself?
> >
> > he's not running the pulse server, he said. :) Ric
>
> My point was, without pulseaudio what use is pavucontrol?  Why install
> pavucontrol when it is useless without pulseaudio?

Someone suggested it, and I was a sucker. :)  Both have now been excised, 
no effect that I can hear.  But iceweasal is frozen again, the *&%$ back 
button does NOT work on cbsnews.com.  Everyone but bbcnews is playing 
with your controls, and cbs seems to be the worst offender. When it 
refuses to go back, sometimes closing the tab works, occasionally the 
close button on the browser works, but I keep a root exec'd copy of htop 
running just so I can have the last word.  And I have to use it about 
25% of the time to exit iceweasal.  But that problem is a separate 
thread Request Entity too Large.  No clue it its related, but get 
firefox will get a visit soon if I can't get this under control.
>
> Lisi

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503221259.09709.ghesk...@wdtv.com

Re: Another problem is getting old

[Brian]

On Sun 22 Mar 2015 at 12:44:30 -0400, Gene Heskett wrote:

> Greetings, iceweasal guru's;
> 
> Still the wheezy based install here.
> 
> What is the cause of my getting a refusal to go  look at what is supposed 
> to be a news story, by iceweasal?
> 
> Instead of going to the link, its an error "413 Request entity too large"

You forgot to give the URL of the page.

Aspirant gurus have been known to do a search with "firefox 413 Request
entity too large" when seeking a solution.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/22032015180831.dfbcd4dba...@desktop.copernicus.demon.co.uk

scanbd

[b-misc]

Hi list,

I've set up scanbd successfully on my Jessie box (everything up to date, using 
systemd). Everything works really well if I start scanbd as user root on the 
command line, it scans for local-only device and finds my scanner which is 
connected via USB 3.

If I start scanbd as a service it scans for the scanner... and finds nothing. 
Why? Where can I look? A permission problem? But it's the same configuration, 
once started as root, once as a service.

From scanbd.conf:
[...]
user = saned
group = scanner
[...]

Thanks for any hints.

Bernd


signature.asc
Description: This is a digitally signed message part.

Re: sound vanished with a reboot?

[Joe]

On Sun, 22 Mar 2015 09:16:58 -0400
Gene Heskett  wrote:


> 
> My hearings direction finder isn't as good as it was even 20 years
> ago, and it was just last night that I discovered the kmail beep
> isn't mono on center, its either the pc's own speaker, or right
> channel only, and I strongly suspect its the pc's own speaker that is
> making the incoming mail beep.  From where I sit, the direction of
> the right speaker and the pc's speaker are in line but one is on the
> table and one is under the table.

Most single-pitch sounds aren't directional inside a room, just move
your ears around a few feet and see how many different directions you
hear it from. You're hearing the standing wave pattern set up between
the walls, and 'loudest is where it's coming from' gets fooled.

I once spent several hours trying to find out why my server had started
beeping for a minute at midnight, quite loudly. Cron and anacron seemed
innocent, but *something* was causing it. I tried software disabling
the internal speaker, no good.

Eventually I tried standing in front of the server at the witching
hour, with the door open, hoping to get a directional fix on the beep.
I did... it was coming from the nearby weather station, which unknown
to me had two alarms, which were trivial to enable if you hit the wrong
button when setting the barometric pressure...

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150322182423.403ad...@jresid.jretrading.com

Re: Problem forward/postroute http/https thru vlan-ed interface.

[Mimiko]

Well.

I did some test today to with tcpdump. It's realy strange. First I 
uninstalled vlan. Configured all again. using tcpdump I saw it was 
sending packets. But at first it didn't want to work.


I added 8021q to /etc/modules, rebooted server and as I wrote: ping 
works, ftp works, but not http.


The strange thing that as soon I am doing `tcpdump -i eth1 -ne`, where 
eth1 is the interface to the internet and vlan configured, http starts 
working. So in a start up script I've put:


timeout 1 tcpdump -i eth1 -ne

Its strange that this is needed to start web to work.

I think its not wright this. Is this tipical?


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/550f0be2.4090...@gmail.com

Re: sound vanished with a reboot?

[Ric Moore]

On 03/22/2015 12:33 PM, Lisi Reisz wrote:

On Sunday 22 March 2015 09:12:51 Ric Moore wrote:

On 03/22/2015 02:41 AM, Lisi Reisz wrote:

On Sunday 22 March 2015 06:12:48 Ric Moore wrote:

On 03/21/2015 10:12 PM, Gene Heskett wrote:

Greetings audio guru's;

All sound Except the new mail beep from kmail, vanished with the first
reboot after 20 days uptime while dinking around with what was sold to
me as a new 2Tb Toshiba drive, but which did not turn out to be a
sealed box.  I do not think its related.

Pursuant to someones suggestions, I installed pavuctl and pavumeter
this morning early, but according to synaptic, that is the extent of
the pulse install, no other pulse stuff is seen as installed by
synaptic.  And of coarse, they don't work, no server.


KDE has it's own notion of sound. Good luck! :0 Ric


Gene is using TDE now.


But he uses kmail. I bet it drug phonon, the KDE sound manager, into his
mix.


No, he uses KMail-Trinity.  I'd be very surprised if it dragged in anything
from KDE4.  I have kmail-trinity.

lisi@Tux-II:~$ aptitude show phonon
Package: phonon
State: not installed
Multi-Arch: same
Version: 4:4.6.0.0-3
Priority: optional
Section: sound
Maintainer: Debian Qt/KDE Maintainers 
Architecture: amd64

If Gene has phonon it is a hangover from KDE4 and nothing to do with his
present kmail-trinity.


You don't mention it, Gene, but what about pulseaudio itself?


he's not running the pulse server, he said. :) Ric


My point was, without pulseaudio what use is pavucontrol?  Why install
pavucontrol when it is useless without pulseaudio?


Heh, go figure! :) Ric



--
My father, Victor Moore (Vic) used to say:
"There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome." R.I.P. Dad.
http://linuxcounter.net/user/44256.html


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/550f0f2d.4000...@gmail.com

Re: Problem forward/postroute http/https thru vlan-ed interface.

[Sven Hartge]

Mimiko  wrote:

> I did some test today to with tcpdump. It's realy strange. First I
> uninstalled vlan. Configured all again. using tcpdump I saw it was
> sending packets. But at first it didn't want to work.

> I added 8021q to /etc/modules, rebooted server and as I wrote: ping
> works, ftp works, but not http.

Which is very very strange. If FTP works, which is a TCP-based protocol
like HTTP, then HTTP should work as well. FTP, with its two connections
(control and data) being a much bigger pain in the ass to a) firewall
and b) masquerade, is normally the procotol which does not work in a
complex setup.

> The strange thing that as soon I am doing `tcpdump -i eth1 -ne`, where
> eth1 is the interface to the internet and vlan configured, http starts
> working. So in a start up script I've put:

> timeout 1 tcpdump -i eth1 -ne

You can use something like "ip link set dev $DEVICE promisc on" so
toggle that, no need to run a tcpdump in the background.

> Its strange that this is needed to start web to work.

> I think its not wright this. Is this tipical?

No, this is not typical.

Something smells fishy here. Forcing a device into promiscuous to get it
working in my book normally indicates a problem with the driver (or the
hardware).

For example I once had a problem with the via-velocity network driver
and IPv6, which only started working once I put the device into
promiscuous mode because the driver did not correctly configure the
hardware for multicasts.

What kind of network card and kernel version do you use? 

Please show the unmodified (!) output from

ip route show
ip link show
ip rule show
iptables -v -L

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/ibfpo3mro...@mids.svenhartge.de

Redirect HTTPS with Squid3+Squidguard

[Michael I.]

Hello list,

I have a problem with my squid3 + squidguard. I can't redirect https 
requests to an errorpage. When I request a blocked https page it always 
says the site isn't available.


I searched on the internet an there it says, it is an problem with the 
https protocol because https is direct an dosn't allow an redirect.


Is there really no way to redirect https request to an errorpage with 
squid3+squidguard?


Thanks for help.

--
best regards
Michael I.


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/550f1fb8.1030...@abwesend.de

Re: Another problem is getting old

[Gene Heskett]

On Sunday 22 March 2015 14:12:24 Brian wrote:
> On Sun 22 Mar 2015 at 12:44:30 -0400, Gene Heskett wrote:
> > Greetings, iceweasal guru's;
> >
> > Still the wheezy based install here.
> >
> > What is the cause of my getting a refusal to go  look at what is
> > supposed to be a news story, by iceweasal?
> >
> > Instead of going to the link, its an error "413 Request entity too
> > large"
>
> You forgot to give the URL of the page.
>
CBS in particular are hiding it, so I never see the url long enough to 
even menally snashot it.

> Aspirant gurus have been known to do a search with "firefox 413
> Request entity too large" when seeking a solution.

I did do that, but iceweasal does not have the line that was suggested to 
be edited in its about:config.  It was also a couple weeks back when I 
did that search, so I'll look again.

Now the fix is purported to be entirely the servers fault.  I'll see if I 
can scrape up a phone number to call them with tomorrow.  I do have some 
connections I can lean on, having been in BC engineering since late '63, 
the last 30 being at CBS affiliate. :)

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503221646.51071.ghesk...@wdtv.com

Re: sound vanished with a reboot?

[Gene Heskett]

On Sunday 22 March 2015 14:24:23 Joe wrote:
> On Sun, 22 Mar 2015 09:16:58 -0400
>
> Gene Heskett  wrote:
> > My hearings direction finder isn't as good as it was even 20 years
> > ago, and it was just last night that I discovered the kmail beep
> > isn't mono on center, its either the pc's own speaker, or right
> > channel only, and I strongly suspect its the pc's own speaker that
> > is making the incoming mail beep.  From where I sit, the direction
> > of the right speaker and the pc's speaker are in line but one is on
> > the table and one is under the table.
>
> Most single-pitch sounds aren't directional inside a room, just move
> your ears around a few feet and see how many different directions you
> hear it from. You're hearing the standing wave pattern set up between
> the walls, and 'loudest is where it's coming from' gets fooled.
>
> I once spent several hours trying to find out why my server had
> started beeping for a minute at midnight, quite loudly. Cron and
> anacron seemed innocent, but *something* was causing it. I tried
> software disabling the internal speaker, no good.
>
> Eventually I tried standing in front of the server at the witching
> hour, with the door open, hoping to get a directional fix on the beep.
> I did... it was coming from the nearby weather station, which unknown
> to me had two alarms, which were trivial to enable if you hit the
> wrong button when setting the barometric pressure...
>
> --
> Joe

Chuckle, war stories, love 'em joe.  After 53 years in broadcast 
engineering, I have several of those myself.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201503221649.41995.ghesk...@wdtv.com

Re: Redirect HTTPS with Squid3+Squidguard

[Sven Hartge]

Michael I.  wrote:

> I have a problem with my squid3 + squidguard. I can't redirect https
> requests to an errorpage. When I request a blocked https page it
> always says the site isn't available.

> I searched on the internet an there it says, it is an problem with the
> https protocol because https is direct an dosn't allow an redirect.

This is correct. A HTTP-Client doing HTTPS over a proxy like squid uses
CONNECT (instead of HEAD, GET or POST) which instructs the proxy to open
a TCP connectio to the specified host and port and forward any bytes
sent or received. Since inside that connction the data is encrypted, the
proxy cannot do anything special with it.

> Is there really no way to redirect https request to an errorpage with
> squid3+squidguard?

Short answer: No, there is not. 

Long answer: The only way is to setup a transparent proxy, intercepting
any outbound connection and terminating the encryption on the proxy. You
will need a fake CA certificate with which the proxy is able to create
fake server certificates so the client still thinks it is connected to
the real server.

And here it gets a) dangerous and b) expensive.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/jbfpujsro...@mids.svenhartge.de

Re: Cool things to do with server

[Stuart Longland]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 15/03/15 09:11, Joris Bolsens wrote:
>> Mail server,
> I thought about this, but from what i understand, mail servers are 
> notoriously difficult to secure properly.

The crucial bit is ensuring you don't openly relay all mail.  Only
traffic from your authorised users.

That's the major tricky bit.  Nothing worse than coming home to a
modem running red hot and a mail queue crammed with Viagra spam.
(Been there, done that.  On dial-up too no less.)

The only issue you might hit is port 25/tcp being blocked by your ISP.
 You may have to relay outbound email via their SMTP server.  Even if
it's blocked inbound too, you can still use something like `fetchmail`
to grab mail from POP3 and IMAP mailboxes anywhere and present all
your email as one homogeneous mailbox with as much space as you like.

This was one of the reasons I don't use Gmail: I had a >1GB mailbox
back in 2002, a time when the average webmail account offered about
10MB.  Having gotten it working, I see no reason to move.

I've been hosting a number of websites on mine (which runs Gentoo, but
the same can be achieved in Debian).  At the moment it's a "shared
hosting" arrangement but I'm starting to look into moving to LXC.
(The machine is an Intel Atom with no VT extensions, so no KVM for me.)

Using LXC then, your host can basically just act as a router/firewall
and reverse proxy (using Apache/nginx for http; sniproxy for https)
and your actual hosted services are on internal containers in a
virtual DMZ.

Spinning up minimal LXC instances using deboostrap is a synch and they
take very little disk space.
- -- 
Stuart Longland (aka Redhatter, VK4MSL)

I haven't lost my mind...
  ...it's backed up on a tape somewhere.
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBAgAGBQJVDyztAAoJEE36GRQQveO3nHcP/2Y2DsWyTZuYmbM8ErqQnvZX
ri2v41cnLjvElBOaD7KIcLTCIzmSGJRnkOjFqO76nERAShSsVRW6oU3hNA64tHkQ
LCR2Du96b5xOCiNPJTP2czznWc9bCBOpzzBwKtKIIqwsoBIIteWcs99cOz4iEzSg
F1Vc62R/PhBDe8goR/oV0KibQq83PvnUbOfEbujT+jB89cj+WfHByEaBw4aHEo+Q
08iL6ifWXYUe7LqPNNAL3knqCLTh9kNLJf0Le8GI5cYpY0TBXxLmd+66T96u2L57
+PIe0qu2H6Ufj1IIPi1/H8L0OLPrPL82zuNTY2JGN+6ywZR2+24xtvL7bio6d6ex
pu4VDi0QoABIeoMaOt17IRXH3b3v61GtLwfp5Y6vH+RoC8gjfLViW4FNzwO/JF2g
q6ZlMyPoyHth80ajfxywDXBOAuzDmcCrPq90Icde5ipGxo9rQes0XR9QQh9LnxpL
Q5ZdfQVDIafDDfGSQ5D/cBvy1UzP4fIa+mkoZvdW4rKlTD1fLrtpAp59rAu27X99
d6u1myOk8MJ0yTKT6EXXmlL9d8GJ86d7mRNj7WBhgjc5MUIohMHkWe5EGDWJ7agj
n8hzDwvOlW4YbMSy4VBBjvA0Js2Pkey6W3CVjaMaQLxlpMAHSQ+WyeomusUNAsiR
IdK7DqzJaaL1JtuONJlK
=ji8H
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/550f2ced.8010...@longlandclan.yi.org

NetInstaller Wheezy (7.8) on ASUS M4A78A-M/CSM does not see SATA HDDs

[Snow Leopard]

Hi,

I am attempting to netinstall "Wheezy" (7.8) on a computer with ASUS 
M4A785-M/CSM mainboard (BIOS was updated to most recent version 2302 
2011/03/18)  and WD 2TB SATA HDD.


Netnstaller requires network driver (rtl_nic) which I provided on USB 
drive and the installer gained network access.


But netinstaller does not see SATA HDDs (tried SATA in  both IDE / AHCI 
BIOS mode settings -- HDD WD20).


Please nudge me in right direction what should be done on my part to 
make netinstaller to be able see SATA hard drives.


Thank you in advance
Andy

 lspci (IDE mode) 
---

00:00.0 Host bridge: Advanced Micro Devices [AMD] RS880 Host Bridge
00:01.0 PCI bridge: ASUSTeK Computer Inc. RS880 PCI to PCI bridge (int gfx)
00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780/RS880 PCI to PCI 
bridge (PCIE port 5)
00:11.0 SATA controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 SATA Controller [IDE mode]
00:12.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:12.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:12.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:13.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:13.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:13.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:14.0 SMBus: Advanced Micro Devices [AMD] nee ATI SBx00 SMBus 
Controller (rev 3c)
00:14.1 IDE interface: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 IDE Controller
00:14.2 Audio device: Advanced Micro Devices [AMD] nee ATI SBx00 Azalia 
(Intel HDA)
00:14.3 ISA bridge: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 LPC host controller
00:14.4 PCI bridge: Advanced Micro Devices [AMD] nee ATI SBx00 PCI to 
PCI Bridge
00:14.5 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI2 Controller
00:18.0 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
HyperTransport Configuration
00:18.1 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
Address Map
00:18.2 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
DRAM Controller
00:18.3 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
Miscellaneous Control
00:18.4 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
Link Control
01:05.0 VGA compatible controller: Advanced Micro Devices [AMD] nee ATI 
RS880 [Radeon HD 4200]
01:05.1 Audio device: Advanced Micro Devices [AMD] nee ATI RS880 HDMI 
Audio [Radeon HD 4200 Series]
02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. 
RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 03)
03:06.0 USB controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 61)
03:06.1 USB controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 61)

03:06.2 USB controller: VIA Technologies, Inc. USB 2.0 (rev 63)
03:06.3 FireWire (IEEE 1394): VIA Technologies, Inc. VT6306/7/8 [Fire 
II(M)] IEEE 1394 OHCI Controller (rev 46)



 ouput lspci (AHCI mode) 
--

00:00.0 Host bridge: Advanced Micro Devices [AMD] RS880 Host Bridge
00:01.0 PCI bridge: ASUSTeK Computer Inc. RS880 PCI to PCI bridge (int gfx)
00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780/RS880 PCI to PCI 
bridge (PCIE port 5)
00:11.0 SATA controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 SATA Controller [AHCI mode]
00:12.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:12.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:12.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:13.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:13.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:13.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:14.0 SMBus: Advanced Micro Devices [AMD] nee ATI SBx00 SMBus 
Controller (rev 3c)
00:14.1 IDE interface: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 IDE Controller
00:14.2 Audio device: Advanced Micro Devices [AMD] nee ATI SBx00 Azalia 
(Intel HDA)
00:14.3 ISA bridge: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 LPC host controller
00:14.4 PCI bridge: Advanced Micro Devices [AMD] nee ATI SBx00 PCI to 
PCI Bridge
00:14.5 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI2 Controller
00:18.0 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
HyperTransport Configuration
00:18.1 Host bridge: Advanced Micro Devices [AMD] Family 10h

Changing of ifDescr of SNMP of Debian Jessie

[Daniel Bareiro]

Hi all!

A few days ago I decided to migrate my own servers to Debian GNU/Linux
Jessie. Having migrated my firewall, I started getting an error in the
Nagios Manubulon plugin check_snmp_int.pl since it does not find the
interface eth1.

# ./check_snmp_int.pl -H 10.1.0.10 -l Us3r -x passw0rd0 \
> -X passwOrd1 -L md5,des -w 1500,295 -c 2500,400 \
> -k -B --label -M -B --label -n eth1
ERROR : Unknown interface eth1


This was running smoothly prior to migration, although it now seems to
have changed the description:


# ./check_snmp_netint.pl -H 10.1.0.10 -l Us3r -x passw0rd0 \
> -X passwOrd1 -L md5,des -n -v
Alarm at 10 + 5
SNMPv3 AuthPriv login : Us3r, md5, des
Filter :
OID : 1.3.6.1.2.1.2.2.1.2.2, Desc : Realtek Semiconductor Co., Ltd.
RTL-8100/8101L/8139 PCI Fast Ethernet Adapter
OID : 1.3.6.1.2.1.2.2.1.2.1, Desc : lo
OID : 1.3.6.1.2.1.2.2.1.2.3, Desc : VIA Technologies, Inc. VT6102 [Rhine-II]
OID : 1.3.6.1.2.1.2.2.1.2.4, Desc : tun0
Name : Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast
Ethernet Adapter, Index : 2
Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet
Adapter:UP:(1 UP): OK |


So I checked the equivalence between ifDescr and ifName:

# snmpwalk -v 3 -u Us3r -l authPriv -a MD5 -A passw0rd0 \
> -x DES -X passwOrd1 10.1.0.10 ifDescr
IF-MIB::ifDescr.1 = STRING: lo
IF-MIB::ifDescr.2 = STRING: Realtek Semiconductor Co., Ltd.
RTL-8100/8101L/8139 PCI Fast Ethernet Adapter
IF-MIB::ifDescr.3 = STRING: VIA Technologies, Inc. VT6102 [Rhine-II]
IF-MIB::ifDescr.4 = STRING: tun0


# snmpwalk -v 3 -u Us3r -l authPriv -a MD5 -A passw0rd0 \
> -x DES -X passwOrd1 10.1.0.10 ifName
IF-MIB::ifName.1 = STRING: lo
IF-MIB::ifName.2 = STRING: eth1
IF-MIB::ifName.3 = STRING: eth0
IF-MIB::ifName.4 = STRING: tun0


I could use something like this, but the output is extremely long:

# ./check_snmp_netint.pl -H 10.1.0.10 -l Us3r -x passw0rd0 \
> -X passwOrd1 -L md5,des -w 1500,295 -c 2500,400 -k -B --label -k \
> -B --label -n "Realtek.*"
Realtek Semiconductor Co., Ltd. RTL-8100/8101L/8139 PCI Fast Ethernet
Adapter:UP (in=93.0Kbps/out=13.1Kbps):(1 UP): OK |


It's a pity If it can not solve because quite a while I was using the
check_snmp_int.pl plugin and was very happy with their results. But now
in Debian Jessie I'm having this problem. It seems that something has
changed in the SNMP service included in the new version of Debian since
before (on Debian Wheezy) the description matched the ifName:

# ./check_snmp_netint.pl -H srv01.freesoftware -C public -w 1500,295 -c
2500,400 -n -v
Alarm at 10 + 5
SNMP v1 login
Filter :
OID : 1.3.6.1.2.1.2.2.1.2.2, Desc : eth0
OID : 1.3.6.1.2.1.2.2.1.2.1, Desc : lo
Name : eth0, Index : 2
eth0:UP:(1 UP): OK |


I think it is easier to identify interfaces such as eth0, eth1, etc,
rather than by its manufacturer/model.



Any suggestions to return to the original behavior?


Thanks in advance.

Best regards,
Daniel


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/550f36e9.9060...@gmx.net

Re: Cool things to do with server

[Joe]

On Mon, 23 Mar 2015 06:58:21 +1000
Stuart Longland  wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> On 15/03/15 09:11, Joris Bolsens wrote:
> >> Mail server,
> > I thought about this, but from what i understand, mail servers are 
> > notoriously difficult to secure properly.
> 
> The crucial bit is ensuring you don't openly relay all mail.  Only
> traffic from your authorised users.
> 
> That's the major tricky bit.  Nothing worse than coming home to a
> modem running red hot and a mail queue crammed with Viagra spam.
> (Been there, done that.  On dial-up too no less.)

There are basically two ways, with slight variations: you either relay
only for authenticated senders, and organise your network machines to
authenticate, or if your mail server is within your private network,
you can relay only for hosts in that network address range. If your
email server is outside your network, and not accessible by VPN, only
the authentication method is possible. 
> 
> The only issue you might hit is port 25/tcp being blocked by your ISP.
>  You may have to relay outbound email via their SMTP server.

I think that's quite rare, as I still get vast amounts of malware from
domestic connections. What is more likely is that outgoing mail will
not be accepted by many people for a variety of perfectly good
spam-reducing reasons. Many ISPs don't care if their IP address blocks
are on email blacklists, and won't make any attempt to have them
removed. Many will not provide means of setting a proper PTR record for
the IP address. In some parts of the world, it's difficult and/or
expensive to obtain a fixed IP address, and while some kind of job can
be done using a dynamic address, it's not ideal and almost certainly
the address pool will be blacklisted, requiring the use of an outgoing
smarthost.

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150322214220.6e0f9...@jresid.jretrading.com

Re: X11/Thinkpad T430: partially drops input from USB devices after resume

[Joel Roth]

On Sat, Mar 21, 2015 at 01:05:58AM +, stefan.schwar...@gmx.net wrote:

> I am using my laptop (lenovo T430, debian testing)
> regularly in a docking station. The dock has a USB
> keyboard, USB mouse and monitor  permanently attached. The
> laptops suspends from time to time, and _after_ resuming
> X11 or some other system component  the input from USB
> mouse and keyboard to be dropped/ignored partially.
> Symptoms are that the cursor does not move with the mouse,
> however it will start moving again if I click any of the
> mouse buttons; or that the keyboard input is ignored until
> I hit some arbitrary keys very rapidly. The USB amnesia
> starts again if I leave the input device untouched for
> some seconds.  The issue will not occur for newly
> connected devices or if I reconnect mouse/keyboard. The
> dock is not the issue as I can reproduce the phenomenon
> with a USB mouse directly connected to the laptop. 
> 
> I am looking for ways to correctly diagnose things to file
> a bug (against which package: xorg-input, kernel/driver,
> ...).

I've had a similar problem with my T410, running sid. 
I was losing the first few keystrokes when I begin typing on a USB
keyboard. I didn't connect it with sleeping.

At the moment (typing on USB keyboard I plugged in to test)
I don't see the problem.

Linux version 3.16.0-4-amd64 (debian-ker...@lists.debian.org) (gcc version 
4.8.3 (Debian 4.8.3-13) ) #1 SMP Debian 3.16.7-2 (2014-11-06)

cheers,

Joel
 
> dmesg shows on device attachment/boot, e.g. for a cordless USB mouse:
> [316267.291416] usb 3-1.2: new low-speed USB device number 7 using ehci-pci
> [316267.390581] usb 3-1.2: New USB device found, idVendor=046d, idProduct=c521
> [316267.390588] usb 3-1.2: New USB device strings: Mfr=1, Product=2, 
> SerialNumber=0
> [316267.390591] usb 3-1.2: Product: USB Receiver
> [316267.390593] usb 3-1.2: Manufacturer: Logitech
> [316267.397463] input: Logitech USB Receiver as 
> /devices/pci:00/:00:1a.0/usb3/3-1/3-1.2/3-1.2:1.0/0003:046D:C521.002D/input/input60
> [316267.397850] hid-generic 0003:046D:C521.002D: input,hidraw0: USB HID v1.11 
> Mouse [Logitech USB Receiver] on usb-:00:1a.0-1.2/input0
> [316267.405442] input: Logitech USB Receiver as 
> /devices/pci:00/:00:1a.0/usb3/3-1/3-1.2/3-1.2:1.1/0003:046D:C521.002E/input/input61
> [316267.406232] hid-generic 0003:046D:C521.002E: input,hiddev0,hidraw1: USB 
> HID v1.11 Device [Logitech USB Receiver] on usb-:00:1a.0-1.2/input1
> 
> on wakeup (all USB related messages)
> [316278.048335] xhci_hcd :00:14.0: System wakeup disabled by ACPI
> [316278.048401] ehci-pci :00:1a.0: System wakeup disabled by ACPI
> [316278.048465] ehci-pci :00:1d.0: System wakeup disabled by ACPI
> [316278.048543] PM: noirq resume of devices complete after 15.665 msecs
> ...
> [316278.428114] usb 3-1.1: reset full-speed USB device number 3 using ehci-pci
> [316278.592293] usb 3-1.6: reset high-speed USB device number 6 using ehci-pci
> 
> lsusb (after resume)
> sts@nbof08:~$ lsusb
> Bus 004 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
> Bus 004 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> Bus 003 Device 006: ID 04f2:b2da Chicony Electronics Co., Ltd 
> Bus 003 Device 005: ID 0a5c:21e6 Broadcom Corp. BCM20702 Bluetooth 4.0 
> [ThinkPad]
> Bus 003 Device 004: ID 147e:2020 Upek TouchChip Fingerprint Coprocessor (WBF 
> advanced mode)
> Bus 003 Device 007: ID 046d:c521 Logitech, Inc. Cordless Mouse Receiver
> Bus 003 Device 003: ID 17ef:1003 Lenovo Integrated Smart Card Reader
> Bus 003 Device 002: ID 8087:0024 Intel Corp. Integrated Rate Matching Hub
> Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
> Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
> 
> Xorg.0.log (info refering to device attachment, there is no info after resume:
> ...
> [316188.752] (II) config/udev: Adding input device Logitech USB Receiver 
> (/dev/input/event14)
> [316188.752] (**) Logitech USB Receiver: Applying InputClass "evdev pointer 
> catchall"
> [316188.752] (II) Using input driver 'evdev' for 'Logitech USB Receiver'
> [316188.752] (**) Logitech USB Receiver: always reports core events
> [316188.752] (**) evdev: Logitech USB Receiver: Device: "/dev/input/event14"
> [316188.752] (--) evdev: Logitech USB Receiver: Vendor 0x46d Product 0xc521
> [316188.752] (--) evdev: Logitech USB Receiver: Found 20 mouse buttons
> [316188.752] (--) evdev: Logitech USB Receiver: Found scroll wheel(s)
> [316188.752] (--) evdev: Logitech USB Receiver: Found relative axes
> [316188.752] (--) evdev: Logitech USB Receiver: Found x and y relative axes
> [316188.752] (II) evdev: Logitech USB Receiver: Configuring as mouse
> [316188.752] (II) evdev: Logitech USB Receiver: Adding scrollwheel support
> [316188.752] (**) evdev: Logitech USB Receiver: YAxisMapping: buttons 4 and 5
> [316188.752] (**) evdev: Logitech USB Receiver: EmulateWhee

Re: Cool things to do with server

[Stuart Longland]

On 23/03/15 07:42, Joe wrote:
>> The only issue you might hit is port 25/tcp being blocked by your ISP.
>> >  You may have to relay outbound email via their SMTP server.
> I think that's quite rare, as I still get vast amounts of malware from
> domestic connections. What is more likely is that outgoing mail will
> not be accepted by many people for a variety of perfectly good
> spam-reducing reasons.

Not as rare as one would like, as it happens.  Telstra 3G connections
are one example where port 25 is firewalled off.  Yes, it'll connect,
but it'll be one of Telstra's servers, not yours, that you connect to.

I found this out the hard way when I couldn't figure out why my father
had trouble getting into his email when he was accessing it via 3G.

The solution was authenticated STARTTLS SMTP on another port.

> Many ISPs don't care if their IP address blocks
> are on email blacklists, and won't make any attempt to have them
> removed. Many will not provide means of setting a proper PTR record for
> the IP address. In some parts of the world, it's difficult and/or
> expensive to obtain a fixed IP address, and while some kind of job can
> be done using a dynamic address, it's not ideal and almost certainly
> the address pool will be blacklisted, requiring the use of an outgoing
> smarthost.

Indeed, you would think they wouldn't want the bad publicity of being
blacklisted for spam.  The "don't care" attitude that's seemingly so
universal is saddening, but that's a discussion for another list.

Absolutely though to run a mail server effectively, a static IP address
is really a must, although you can get by with dynamic.  The only real
show stopper is carrier grade NAT, then the whole exercise becomes
rather pointless unless you only read your mail on your own private LAN.
-- 
Stuart Longland (aka Redhatter, VK4MSL)

I haven't lost my mind...
  ...it's backed up on a tape somewhere.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/550f3c5e.1040...@longlandclan.yi.org

Re: Cool things to do with server

[Bob Proulx]

Stuart Longland wrote:
> Joris Bolsens wrote:
> >> Mail server,
> > I thought about this, but from what i understand, mail servers are 
> > notoriously difficult to secure properly.

Not really.  They are notoriously infamous when people don't secure
them.  But securing them is quite easy.  If you install a Debian
packaged one then they will be secure by default.  Just don't break it
after that point.  :-)

> The only issue you might hit is port 25/tcp being blocked by your ISP.
> You may have to relay outbound email via their SMTP server.

That really only happens on home dynamic address networks on home
cable modems and that type of thing.  In that case most do block
outgoing port 25 as an anti-virus-spam mitigation.  I think those
should be the default.  I always block outgoing port 25 on any
business system I set up for the exactly the same reason.

Even if they weren't blocked I don't know anyone of my peers that
allow receiving email from an address in the dynamic IP ranges of home
cable modems.  The only mail from them is spam from virus infected
PCs.  Therefore even if they didn't block port 25 you would have
problems running a mail server from your home network because no one
else would receive email from you.  In order to be a mail server you
really, really, really need a static IP address with a clean
reputation.

Blocking outbound 25 doesn't affect users these days.  Almost everyone
except for us geeks are using a web browser for their email interface
these days.  A much smaller set use imap.  (I hate using the web
browser for email.  I still use a real mail user client.  I expect
this to continue.)

But if you rent a VM or collocated server from a hosting provider then
you will be getting a static IP address.  You will have a first class
entrance to the network.  You can then send mail without having port
25 blocked.  A reputable hosting service will not support spammers and
the reputation on your IP will be clean.

Bob


signature.asc
Description: Digital signature

Re: Redirect HTTPS with Squid3+Squidguard

[Bob Proulx]

Sven Hartge wrote:
> Michael I. wrote:
> > Is there really no way to redirect https request to an errorpage with
> > squid3+squidguard?
> 
> Short answer: No, there is not. 

+1, No there is not for the reasons Sven described.

> Long answer: The only way is to setup a transparent proxy, intercepting
> any outbound connection and terminating the encryption on the proxy. You
> will need a fake CA certificate with which the proxy is able to create
> fake server certificates so the client still thinks it is connected to
> the real server.
> 
> And here it gets a) dangerous and b) expensive.

It is extremely bad, bad, bad, as well as dangerous.  I haven't been
following the news in great detail but read all about Komodia's recent
news articles.  Komodia's cracking tools are used in Superfish and
Lenovo was in trouble for pre-installing Superfish.

They apparently do exactly the above of setting up a fake certificate
authority on the local machine and proxying https through.  And made
multiple mistakes in the implementation making them a security
disaster in multiple different ways.  Very bad.  There are many news
articles on the debacle to read all about it.  Don't do it.

Bob


signature.asc
Description: Digital signature

Re: NetInstaller Wheezy (7.8) on ASUS M4A78A-M/CSM does not see SATA HDDs

[Snow Leopard]

Hi,

the issue has been resolved by downloading most recent netboot files 
from next location


http://ftp.nl.debian.org/debian/dists/wheezy/main/installer-amd64/current/images/netboot/debian-installer/amd64/

Andy

On 3/22/2015 2:32 PM, Snow Leopard wrote:

Hi,

I am attempting to netinstall "Wheezy" (7.8) on a computer with ASUS 
M4A785-M/CSM mainboard (BIOS was updated to most recent version 2302 
2011/03/18)  and WD 2TB SATA HDD.


Netnstaller requires network driver (rtl_nic) which I provided on USB 
drive and the installer gained network access.


But netinstaller does not see SATA HDDs (tried SATA in  both IDE / 
AHCI BIOS mode settings -- HDD WD20).


Please nudge me in right direction what should be done on my part to 
make netinstaller to be able see SATA hard drives.


Thank you in advance
Andy

 lspci (IDE mode) 
---

00:00.0 Host bridge: Advanced Micro Devices [AMD] RS880 Host Bridge
00:01.0 PCI bridge: ASUSTeK Computer Inc. RS880 PCI to PCI bridge (int 
gfx)
00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780/RS880 PCI to 
PCI bridge (PCIE port 5)
00:11.0 SATA controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 SATA Controller [IDE mode]
00:12.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:12.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:12.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:13.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:13.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:13.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:14.0 SMBus: Advanced Micro Devices [AMD] nee ATI SBx00 SMBus 
Controller (rev 3c)
00:14.1 IDE interface: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 IDE Controller
00:14.2 Audio device: Advanced Micro Devices [AMD] nee ATI SBx00 
Azalia (Intel HDA)
00:14.3 ISA bridge: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 LPC host controller
00:14.4 PCI bridge: Advanced Micro Devices [AMD] nee ATI SBx00 PCI to 
PCI Bridge
00:14.5 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI2 Controller
00:18.0 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
HyperTransport Configuration
00:18.1 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
Address Map
00:18.2 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
DRAM Controller
00:18.3 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
Miscellaneous Control
00:18.4 Host bridge: Advanced Micro Devices [AMD] Family 10h Processor 
Link Control
01:05.0 VGA compatible controller: Advanced Micro Devices [AMD] nee 
ATI RS880 [Radeon HD 4200]
01:05.1 Audio device: Advanced Micro Devices [AMD] nee ATI RS880 HDMI 
Audio [Radeon HD 4200 Series]
02:00.0 Ethernet controller: Realtek Semiconductor Co., Ltd. 
RTL8111/8168B PCI Express Gigabit Ethernet controller (rev 03)
03:06.0 USB controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 61)
03:06.1 USB controller: VIA Technologies, Inc. VT82x UHCI USB 1.1 
Controller (rev 61)

03:06.2 USB controller: VIA Technologies, Inc. USB 2.0 (rev 63)
03:06.3 FireWire (IEEE 1394): VIA Technologies, Inc. VT6306/7/8 [Fire 
II(M)] IEEE 1394 OHCI Controller (rev 46)



 ouput lspci (AHCI mode) 
--

00:00.0 Host bridge: Advanced Micro Devices [AMD] RS880 Host Bridge
00:01.0 PCI bridge: ASUSTeK Computer Inc. RS880 PCI to PCI bridge (int 
gfx)
00:0a.0 PCI bridge: Advanced Micro Devices [AMD] RS780/RS880 PCI to 
PCI bridge (PCIE port 5)
00:11.0 SATA controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 SATA Controller [AHCI mode]
00:12.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:12.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:12.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:13.0 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB OHCI0 Controller
00:13.1 USB controller: Advanced Micro Devices [AMD] nee ATI SB7x0 USB 
OHCI1 Controller
00:13.2 USB controller: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 USB EHCI Controller
00:14.0 SMBus: Advanced Micro Devices [AMD] nee ATI SBx00 SMBus 
Controller (rev 3c)
00:14.1 IDE interface: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 IDE Controller
00:14.2 Audio device: Advanced Micro Devices [AMD] nee ATI SBx00 
Azalia (Intel HDA)
00:14.3 ISA bridge: Advanced Micro Devices [AMD] nee ATI 
SB7x0/SB8x0/SB9x0 LPC host controller
00:14.4 PCI bridge: Advanced Micro Devices [AMD] nee ATI SBx00 PCI to 
PCI Bridge
0

Re: Redirect HTTPS with Squid3+Squidguard

[Sven Hartge]

Bob Proulx  wrote:
> Sven Hartge wrote:
>> Michael I. wrote:

>>> Is there really no way to redirect https request to an errorpage
>>> with squid3+squidguard?

>> Long answer: The only way is to setup a transparent proxy,
>> intercepting any outbound connection and terminating the encryption
>> on the proxy. You will need a fake CA certificate with which the
>> proxy is able to create fake server certificates so the client still
>> thinks it is connected to the real server.
>> 
>> And here it gets a) dangerous and b) expensive.

> It is extremely bad, bad, bad, as well as dangerous.  I haven't been
> following the news in great detail but read all about Komodia's recent
> news articles.  Komodia's cracking tools are used in Superfish and
> Lenovo was in trouble for pre-installing Superfish.

There are network policy/security appliances in the enterprise world,
which implement a scanning proxy for HTTPS. They come with a either a
wildcard certificate for * (signed by a valid CA!) or a fake CA
certificate, which you install onto your computers to enable the
appliance to function.

This is of course very dangerous if you don't know what you are doing,
but sometimes there are no other options (for example HIPAA, SOX, PCI,
...) if you have to absolutley control the flow and content of data.

But then, if you are in the area where you need such
MitM-Filter-SSL-breaking-proxies, then you already know of how to do it
and when to do it.

If you don't know how to do it and when to do it, chances are, you don't
need it.

Guessing from Michaels TLD, he is German. This means there are several
other things to consider, based on the environment this is done in. If
this is for a company or govermental agency, the Betriebsrat (works
council) or the Personlrat and the local Datenschutzbeauftragter (data
security official) has to be involved.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/kbfqc92ro...@mids.svenhartge.de

Debian wheezy on Dell 7535

[Gajadur Dwijesh]

Hello...I wanted to know if anyone has been able to use Debian wheezy on
the laptop Dell 7535.
I have been able to install Debian on the laptop successfully...however I
got some issues after installation:

- No Sound
- Can't control screen brightness
- No Wifi..i have already followed the steps on (
https://wiki.debian.org/WiFi) and tried several drivers but it still does
not detect any wifi connection.

Please help..I really want to use Debian on my laptop..

Thank You