August 2003 - openSUSE Users - openSUSE Mailing Lists

RE: [SLE] inetd or not
by Anderson, Simon 28 Aug '03

28 Aug '03

> Again the key advantage here is the "only_from" bit, which > you can set to only allow swat useage from your own > machine. (Of course this could have just as well been > firewalled off providing a single point of filteration of > rather than having it in the firewall, and or xinetd and > or the application itself. > > So there is a slightly finer grained control available in xinetd > but there are other ways to achieve this control (firewalling > with iptables etc) and you can't afford to be without those, > so you get a lot of redundent settins that have to be maintained > in two places. Redundancy isn't a bad thing, consider it to be "complementary." Personally, I appreciate the ability to reinforce my security policies at multiple layers and on multiple devices. A filtering rule which is enforced by the application and IPTables on the box (and the firewall and even the router) means that I need to make configuration modifications in a number of locations, increasing the maintenance load as you say. The advantage however is peace of mind. I know that no single point of failure is going to leave me open. If my IPTables script is misconfigured, I have reliability of policy enforcement by the daemon. Likewise, if my firewall (God forbid) is compromised, my policies are still enforced on the box. Too many administrators believe that a firewall is the be all and end all of network security. It isn't. xinetd replaced inetd in most environments several years ago because of this fine grained control. Anyone that knew what they were doing back then was wrapping inetd; xinetd is an elegant replacement for xinetd/tcpwrappers and (in my view) should be considered a worthwile enforcement point for your security policies. -S.

1 0

Crossover Office problem in SuSE8.2?
by Alex Daniloff 28 Aug '03

28 Aug '03

Hello SuSE folkz, I've got some hair pulling situation with Crossover Office 1.3.1 in SuSE 8.2 After its installation I tried to execute OfficeSetup from Kmenu in KDE. Crossover start up creen shows: "Unable to get list of installed applications child process exited abnormally". And it dies. I tried to install XOffice as a regular user and as a root with the same final result. On SuSE8.1 and older ones the same 1.3.1 version of XOffice installs and works perfectly. Could somebody please give me a hand with this issue. Many thanks in advance. Alex

2 1

IPTables
by Bruce 28 Aug '03

28 Aug '03

Dear all, I have searched the archives without luck so lets see if this issue has occurred before. I have 2 machines, 1 connected to the outside world via ADSL using a Netcomm NB1300 ADSL/router purely as a bridge. (NB1300 highly recommended) Connection using PPPoE is made in the usual way and it works fine. (SuSE 8.2/2.4.19) There is a 2nd ethernet card with the IP address 1.2.3.4 The second machine has an ethernet card with the IP address 1.2.3.3 (say) IPTables is alive and kicking so I added the rule IPTABLES -A INPUT -LOG --log-level 1 # test incoming - temporary!! FROM the outside world I ping 1.2.3.3 and will get a response but no log but from the outside world I ping 1.2.3.4 and will get a response AND a log!!! What am I doing wrong. Cheers,Bruce Stephens, Melbourne Australia. PS IPtables version is v1.2.7a

1 0

Re: [SLE] Hyperthreading question
by ron3763 H 28 Aug '03

28 Aug '03

Let's see I can explain this in short... HT is great for high number dynamic-runnable threads. Ie. Threads in a runnable state but queded for a processor will run more often on an HT processor. Where I use dynamic here is, I mean threads executing differect code paths. This helps the CPU run 2 threads at the same time using different internals of the CPU w/ 2 virtual CPU register sets. Remember HT-Enabled means some CPU resouces and caches are cut in half while others are shared thus adding to contention(stalls) It is my take for Servers and general use and dev use most likely it best to leave it on. For rendering or SETI or anything else that might tax specific sections of the CPU on BOTH runable threads assigned to that Phys CPU (vcpu0&vcpu1) then HT should be OFF. But like anything in this computer crazzed world. You PERSONAL miledge is how you drive you own cmoputer....ie.. use it!! Run tests. -Ron >From: H du Plooy <linuser(a)ananzi.co.za> >To: SuSE Linux-E <suse-linux-e(a)suse.com> >Subject: [SLE] Hyperthreading question >Date: Thu, 28 Aug 2003 22:12:51 +0200 > >In "The Wonderful World of Linux 2.6" by Joseph Pranevich, I read the >following about hyperthreading: > >"Of course, a single processor that pretends to be two is still a single >processor and performance won't really improve much." > >This is what I've though, but I've never been able to see for myself, as >the P4 systems with hyperthreading that have crossed my path, were all >built on faster motherboards/ with faster RAM, ect. than the ones >without it. > >Am I more or less correct, or am I missing something? > >Purely out of interest >Thanks >Hans > > >-- >Check the headers for your unsubscription address >For additional commands send e-mail to suse-linux-e-help(a)suse.com >Also check the archives at http://lists.suse.com >Please read the FAQs: suse-linux-e-faq(a)suse.com > > _________________________________________________________________ MSN 8: Get 6 months for $9.95/month. http://join.msn.com/?page=dept/dialup

2 1

Hyperthreading question
by H du Plooy 28 Aug '03

28 Aug '03

In "The Wonderful World of Linux 2.6" by Joseph Pranevich, I read the following about hyperthreading: "Of course, a single processor that pretends to be two is still a single processor and performance won't really improve much." This is what I've though, but I've never been able to see for myself, as the P4 systems with hyperthreading that have crossed my path, were all built on faster motherboards/ with faster RAM, ect. than the ones without it. Am I more or less correct, or am I missing something? Purely out of interest Thanks Hans

1 0

extreme harddrive activity
by H du Plooy 28 Aug '03

28 Aug '03

Hi all, This is just out of curiosity, but fixing the problem would lessen some irritations too. I have fetchmail --> sendmail --> procmail <spamassassin> (if I understand the order of events correctly. Whenever I download lots of e-mail at a time, I notice my system gets slower and less responsive, sometimes so bad that apps like evolution and mozilla seem to freeze until the mail is delivered. I never noticed the system monitor showning increased cpu activity, and top didn't turn up anything either. Today I realised that it's the hard drive that's going bezerk when I'm downloading mail. Why? It's not a slow drive, at least not slow enough that the colletive size of the mail should tax it. Seagate 40gb ATA-100 5400rpm disc (reiserfs) on a ATA-100 controller. Yast2 reports DMA to work in ATA-100 mode. Any clues? Thanks Hans

6 10

W200 wireless
by Robt. Miller 28 Aug '03

28 Aug '03

I have a Compaq Evo N800v with a wireless card that snaps on the lid. >From what I've been able to find it uses an orinoco_usb driver but I can't find it in my SuSE 8.2 distro. I have found it but it's all orinoco_usb.c drivers, not orinoco_usb.o drivers which I could load with insmod. How do I get the orinoco_usb.c drivers to compile to .o drivers? -- (o< //\ Powered by SuSE Linux V_/_ Virusproof. Crashproof. 4:07pm up 12 days, 2:24, 19 users, load average: 2.22, 2.25, 2.27 processes 1040886

1 0

DiskZapper
by Carl William Spitzer IV 28 Aug '03

28 Aug '03

Category: System & Utilities > Disk utilities Rated: No Rating Version:1.0 License: Freeware This is a Linux based bootable tool intended to wipe all hard drives on a computer to... http://linux.tucows.com/preview/326423.html ________________________________________________________________ The best thing to hit the internet in years - Juno SpeedBand! Surf the web up to FIVE TIMES FASTER! Only $14.95/ month - visit www.juno.com to sign up today!

2 1

RE: [SLE] Hostname Domain name confusion
by Garry Barton 28 Aug '03

28 Aug '03

Thanks John, it works now. > -----Original Message----- > From: John Andersen [mailto:jsa@pen.homeip.net] > Sent: Thursday, August 28, 2003 2:54 AM > To: Garry Barton; suse-linux-e(a)suse.com > Subject: Re: [SLE] Hostname Domain name confusion > > > On Wednesday 27 August 2003 05:51, Garry Barton wrote: > > My quest is what do I set my host name to and where do I do > that. I did > > find some settings in YAST2 for DHCP and host name and such > but I'm not > > sure what to change. I think I need to put the DNS > servers from bellsouth > > somewhere, the route, default gateway, host name, etc.. > somewhere but I > > not sure where. DHCP is handling all of this for me now. > > In that case, just go into yast2 and hard code an IP, the DNS servers > (send it streight to bellsouth) and the machine name. In other words > take the linux box off of dhcp and hard code it. > > You can set the domain name and machine name in there as well. > This is in Yast2 at Network Devices, Network Card. > Default gateway is still your router's internal IP, and make sure > the IP you select is the one the router is going to consider to be > in the DMZ. > (BTW, IMHO, its still not a true DMZ...) > > -- > _____________________________________ > John Andersen > > -- > Check the headers for your unsubscription address > For additional commands send e-mail to suse-linux-e-help(a)suse.com > Also check the archives at http://lists.suse.com > Please read the FAQs: suse-linux-e-faq(a)suse.com > >

1 0

removing unused modules
by Dylan 28 Aug '03

28 Aug '03

Hi all, I've been poking around with lsmod and notice I have mousedev, joydev, evdev and input listed as unused. So, I used modprobe to unload them all, and the box seems (an hour of use later) to be running fine. Two questions then - assuming I don't need these modules (and I don't seem to) how do I stop them getting loaded at boot? And, what is evdev? Cheers Dylan -- Sweet moderation Heart of this nation Desert us not We are between the wars - Billy Bragg

2 3