Using the strings module with iptables, you can construct rules to reject/deny/etc packets with certain strings in them.
The only drawback is the initial TCP connection stays open, then part of it is blocked, and it has to simply time out, but apache never sees the messy logs.
I started using linux at slackware 3.6. I never found a reason to even try another distro. Slackware has always done and let me do anything i want, without any imposing bullshit.
Thanks Pat and team, truly a spectacular product all the time.
Someone hook a honkey up with a mirror or something.
Not supporting non-LSB distros
on
Is RPM Doomed?
·
· Score: 1
This is a great idea:
"Depending on your distribution you've got KDE in/usr,/opt/kde,/opt/kde2 or god knows where. For packaging everyone decided to make a new name for the directory between/usr/src and/RPMS, you've got 'redhat', 'OpenLinux', 'RPM', 'rpm', 'packages' and those are just the ones I've noticed myself. We are getting to the point that we are seriously considering not supporting distributions that don't support the LSB. I've been very encouraged by SuSE's work in this direction, and disappointed at how bad Red Hat and Mandrake are."
You'd think all the distros could get together and agree on LSB, or at least something. It really is needed, and needed right now.
Unfortunately, installing that missing library fails because of three other missing libraries and two other libraries that come in incorrect versions. Depending on how badly you want the original package, you have two choices - either go and search for all missing dependent libraries as well as all libraries dependent on the dependent libraries, or you just give up. How many times have you given up?
Yahoo!: "Microsoft quotes selectively from a number of cases with the effect of mischaracterizing their holdings," U.S. District Judge Colleen Kollar-Kotelly wrote in response to the settlement argument. "The court finds this tactic unpersuasive."
I said "wow!" out loud when I read that. That is fantastic, perhaps we have a judge that isn't going to lay down to all of MS's bullshit this time. Great!
Before her ruling, the judge asked the Justice Department for its opinion. Department lawyers -- as well as representatives of 25 other states that backed up the nine attorneys general -- agreed that the states should be able to bring their case.
Well well, perhaps a few more states can hop on.. If that's possible.
That Other Site: Each side gave Judge Colleen Kollar-Kotelly plenty to chew on as she prepares for final oral arguments,...
And I was hoping for anal,... No wait, I haven't seen her.
First off, it sounds like at first these will be in Liquid audio format. After that, the article wasn't too clear.
No way in hell will I be paying basically $10 for that.
Well, what if they were MP3's with VBR of 80 - 312 Kbps, joint stereo? No. I still wouldn't do it. Why? Because I can sit somewhere and download em' for free.
Good for you, there aren't many people that would do that. They bitch and whine about shit like this, but when it comes down to it, still send that check away at the end of the month.
What incentive do the ISP's have to change?
Why, none of course, customers are still paying.
If you don't like it, vote with your wallet. Just like you've done, kudos.
Heh yeah, same stories, be it their TV or internet. I'd never trust those idiots with any of my data. Even if they got it right, it'd be trusting them I couldn't do.
It's funny you mention sattelite, nearly half the houses here have at least one, and sometimes two or three, sattelite TV dishes on them. Quite a clear message.
I'd recommend anyone who is offended by the tactics of cable companies to simply quit subscribing to cable at all.
Fully agreed. Here inside detroit, Comcast is our cable company, and they are the worst company i've ever seen in every respect: customer support, installation, quality (less than half the channels even come in), and the people who work for them are just plain rude. One of my relatives here even had an installer attempt to steal something from her house, and she caught him in the act. When they came to disconnect our service, they cut the cable where it meets the house coming from the pole, and left. Left it laying there, across live electric wires, in the trees, laying in the yard. Pricks.
Tv is also controlled by americans, and I've seen my local canadian television go downhill when faced against the behemoth of american corporate television.
As an American, who can get CBC over the air, I agree. The only time CBC is any good is Saturday night (heh, do i need to say more), and olympics.
Thank you very much, this is exactly the type of illegal mirroring I requested in an earlier message, out of annoyance at slashdot linking to bullshit reg sites such as NYT.
Slashdot Mirror
Using the strings module with iptables, you can construct rules to reject/deny/etc packets with certain strings in them.
The only drawback is the initial TCP connection stays open, then part of it is blocked, and it has to simply time out, but apache never sees the messy logs.
I use snort, but it's not easy to set up and tweak properly, way too many false alarms.
But it has helped me catch nimda and other nasty tidbits running around the network, allowing me to repair the systems.
Good article, well thought out and cleanly laid out.
My only point is at least to me, GNU/Linux was never meant to be a home operating system.
Flame me baby.
Do I really need to say why? heh.
I started using linux at slackware 3.6. I never found a reason to even try another distro. Slackware has always done and let me do anything i want, without any imposing bullshit.
Thanks Pat and team, truly a spectacular product all the time.
This made me laugh so hard:
Rivard was one of several to point out that MSNBC says software sucks.
MSNBC.
BWHAHAHA thanks for the laughs, jagnecks.
Goodbye.
The only way to prevent this shit is to:
1) strongly encrypt everything
2) random src/dest ports
3) no centralized servers
There is actually something like this in development. Cheers.
None of the behind the scenes politics (or non-politics) matters here. ISS has tarnished themselves, badly.
..."
Really bad move there, many people are going to see things from them in the future and think "Hey, these assholes again,
Smooth move.
I can understand the 'right tool for the job' bit, but these are policies/regulations (laws?). Certainly they weren't written for no reason.
:)
I'd love to see these enforced
Someone hook a honkey up with a mirror or something.
This is a great idea:
/usr, /opt/kde, /opt/kde2 or god knows where. For packaging everyone decided to make a new name for the directory between /usr/src and /RPMS, you've got 'redhat', 'OpenLinux', 'RPM', 'rpm', 'packages' and those are just the ones I've noticed myself. We are getting to the point that we are seriously considering not supporting distributions that don't support the LSB. I've been very encouraged by SuSE's work in this direction, and disappointed at how bad Red Hat and Mandrake are."
"Depending on your distribution you've got KDE in
You'd think all the distros could get together and agree on LSB, or at least something. It really is needed, and needed right now.
Unfortunately, installing that missing library fails because of three other missing libraries and two other libraries that come in incorrect versions. Depending on how badly you want the original package, you have two choices - either go and search for all missing dependent libraries as well as all libraries dependent on the dependent libraries, or you just give up. How many times have you given up?
Source rpms, duh.
Good for the states, and for us!
...
... No wait, I haven't seen her.
Yahoo!:
"Microsoft quotes selectively from a number of cases with the effect of mischaracterizing their holdings," U.S. District Judge Colleen Kollar-Kotelly wrote in response to the settlement argument. "The court finds this tactic unpersuasive."
I said "wow!" out loud when I read that. That is fantastic, perhaps we have a judge that isn't going to lay down to all of MS's bullshit this time. Great!
Before her ruling, the judge asked the Justice Department for its opinion. Department lawyers -- as well as representatives of 25 other states that backed up the nine attorneys general -- agreed that the states should be able to bring their case.
Well well, perhaps a few more states can hop on.. If that's possible.
That Other Site:
Each side gave Judge Colleen Kollar-Kotelly plenty to chew on as she prepares for final oral arguments,
And I was hoping for anal,
First off, it sounds like at first these will be in Liquid audio format. After that, the article wasn't too clear.
No way in hell will I be paying basically $10 for that.
Well, what if they were MP3's with VBR of 80 - 312 Kbps, joint stereo? No. I still wouldn't do it. Why? Because I can sit somewhere and download em' for free.
I'm such a dick.
Good for you, there aren't many people that would do that. They bitch and whine about shit like this, but when it comes down to it, still send that check away at the end of the month.
What incentive do the ISP's have to change?
Why, none of course, customers are still paying.
If you don't like it, vote with your wallet. Just like you've done, kudos.
But when slashdot trolls for comments, like I think is the case here (how many times have we heard this one?), you know its a slow news day :)
Heh yeah, same stories, be it their TV or internet. I'd never trust those idiots with any of my data. Even if they got it right, it'd be trusting them I couldn't do.
It's funny you mention sattelite, nearly half the houses here have at least one, and sometimes two or three, sattelite TV dishes on them. Quite a clear message.
I'd recommend anyone who is offended by the tactics of cable companies to simply quit subscribing to cable at all.
Fully agreed. Here inside detroit, Comcast is our cable company, and they are the worst company i've ever seen in every respect: customer support, installation, quality (less than half the channels even come in), and the people who work for them are just plain rude. One of my relatives here even had an installer attempt to steal something from her house, and she caught him in the act. When they came to disconnect our service, they cut the cable where it meets the house coming from the pole, and left. Left it laying there, across live electric wires, in the trees, laying in the yard. Pricks.
Tv is also controlled by americans, and I've seen my local canadian television go downhill when faced against the behemoth of american corporate television.
As an American, who can get CBC over the air, I agree. The only time CBC is any good is Saturday night (heh, do i need to say more), and olympics.
That's a great idea. I've not been anywhere close to a fan of his, but I've found what I have heard quite interesting.
I'll run out and get it.
Hahaha, that's great! Fantastic.
Thanks a lot man, definately a bookmark to keep.
Thank you very much, this is exactly the type of illegal mirroring I requested in an earlier message, out of annoyance at slashdot linking to bullshit reg sites such as NYT.
Keep it up.
Sure the artist should be credited for the creation of a song but why should a corporation I dont care about make 5 times the money the writer does.
I agree, but when people sign a contract they know what they're getting so I don't wanna hear it.
It is about time the bigger well established artists started acting like this.
Fully agreed. But most of them are soulless, moralless (is that a word?) fucks anyway, good luck.
I wish slashdot would stop posting stories with links to NYT and their lame ass registration.
Or at least get some illegal mirroring up, c'mon guys, give us a damn illegal mirror heh.
Yep, that's what I'm using.
Odd, when I go to read the story at reuters, there's just a page header and then the rest of the page is blank.