I'm going to implement spamd (the tarpit), that's about as proactive I am at going out of my way on offence with my network. Up till now it's all be defense. What else can I do from a FreeBSD server, or an OpenBSD pf firewall box?
Is there a PCI-e card that I can buy to replace my OEM ATI card that'll use these free drivers? The card is pretty new, 128Megs and such, but slow, so if I could buy an upgrade *and* get away from the ATI drivers, I will...
Funny, I got abused on #debian 2 years back, and it was one of the reasons I didn't stick with Deb for too long. I had some noob questions, I didn't understand why I couldn't dnld a sarge iso, and yes, I read the site and tried to understand why before I asked. I got some a*hole responses, finally figured it out myself, but I was very cautious when asking questions. Once I had mixed stable/test/unstable packages and borked my desktop, I drifted towards Gentoo, and the friendly support via forums and IRC was awesome. Thus began my work on the Gentoo project. I would have done the same for Debian, but I don't want to be all high and mighty and not answer any questions from noobs; we were all there at one time.
Djdns deserves another mention. Here's the thread that came up a few days ago on the subject. I'm running it on FreeBSD now, and have learned allot through this discussion (that hasn't happened to me on/. for a long time either, so it was pretty cool.
Mandriva? Haha, good one, but April fools was a few days ago. How I pine for Linux distro names that had nothing to do with the company/group distributing it; Rock Linux is perfect if you ask me. Not to mention Dragon Fly BSD or White Box Linux.
Good points, I do not have FORWARD_ONLY set, and I am using the default DNS list in../servers/@ that was in there when I installed. I am wondering if I should add my DNS servers from my ISP (Speakeasy) to the top of that list, or just leave them out altogether. Docs on multiple sites were not specific about this. Advice? Which is safer?
Anyone using Djdns? I've set it up on my home network server running FreeBSD to provide dnscache for all my boxes within 192* and thus far it's working perfectly. From Djdns' security page, it says that it's impervious to DNS poisoning:
"dnscache does not cache (or pass along) records outside the server's bailiwick; those records could be poisoned. Records for foo.dom, for example, are accepted only from the root servers, the dom servers, and the foo.dom servers."
While I don't think I'm in the clear because of this, I feel better protected from the (unwashed;)) internet. Anyone care to comment, please do, as I've just started using this and want to know how effective it is.
(a monitor showing the screen of EA's golf comes into view, onscreen a virtual Tiger Woods chips a shot off the fairway onto the green, as the ball rolls towards the hole the camera pans out and up revealing that the machine is the new Apple iMac Mini and the player of the golf game is Tiger Woods. With his trademark Nike hat and big smile he proclaims:
[tiger woods]: The new Apple Tiger, it's Grrreeeeaaaat!!!
uggg, here comes the April fools jokes on/. -- sorry, a few years ago it was fun, but now...not so much.
Oh well, at least Apple has a sense of humor.
bo
Why wouldn't they want to punish this person? At the very least they should hold him accountable for loss business (although how much could they loose, really?)
All in all a more understanding MS than we've seen in the past.
bo
Yep, I know, I love it though, not sure why. I'm a freak, I'll admit it, but hey, someone has to do it. Plus I can get as surly as I want at work, in 10 years I see myself as the "here's a quarter, buy yourself a better computer" guy.
bo
Good point, this was 7 years ago, I suspect the jobs they moved to California are likely over there now. It was low level tech support, walking people through getting their DOS based Origin games running under Windows 95. Yeah, walking people thru creating a boot disk with a custom AUTOEXEC.BAT so that the system could play the old games...damn, I can't imagine anyone dealing with that for long now. Oh well, now they just have an easy to follow flowchart to follow. Then if there's any problem..."sorry, my mananger is in a meeting".
bo
I worked at Origin in Austin for a time, but once EA (parent company) wanted to move tech support out to San Mateo, that was it for us. Sure, they offered us a job if we moved out there, but no raise in pay. Stand of living is a bit more out there, so it was no an option. Still, I saw some very dedicated ppl working there, but unfortunately they were expendable when their product grew old. I had allot of fun there, but sometimes it was very depressing.
I'd rather admin unix boxen for a dot com.
bo
Airport is fully supported, that's what I use. No, Airport Exreme is not, and that's not Linux or Apple's fault, it's the chipset manufacturer. Still, you can use a PCMCIA wireless card in it's place on the Powerbooks, and be fine. As for it being a glorified terminal, isn't any computer?:) Seriously though, I am just able to configure everything the way *I* want it, and then get to work. As a sysadmin I don't need office apps, I need a good term, a good mail client, and a good browser. In Linux, I have all I need (save for a right mouse button), and nothing I don't.
As for battery, I haven't timed it, but at work I rarely need to plug it in, of couse I'm using the new powernowd power daemon, which I now complely prefer over CPUfreq. It's more flexable, allowing for squeezing out even more juice over time.
bo
I'll agree with you completely; using the button combo for right click/paste click sucks. I can jack in a nice mini-mouse with a wheel when I'm at a desk, but that's rare. I know Apple is developing a two button mouse now, will be interesting if they put it out on their laptops. Even two buttons would be better, then you could emulate the 3 buttons by hitting both at once for paste.
bo
Price: I got my G3 800Mhz iBook for ~920$ a year and a half ago.
Power: battery staying power is much better on the macs (currently)
Support: Devs have much less crazy hardware to support on the PPC/Apple side, thus everything being supported.
Freedom: To explain why I feel more comfortable in Linux than OSX is inpossible, I just do. Yes, I can download/compile all that stuff on OSX, but what if I want to run Fluxbox, and not the OSX desktop? I can't. I can run both in OSX, but why? Instead I can run Linux, choose whatever the hell I want/don't want, and even have the option to run Mac on Linux http://www.maconlinux.org/ and do whatever the hell I want. Listen to iTunes while in Linux? Use iPhoto in Linux? No problem.
I have an iBook, and love it, however I run Linux on it, Gentoo before, Ubuntu currently. All funcitions are supported, it's a perfect match in my opinion. Ppl that gripe "why would you run Linux instead of OSX, OSX is BSD!" just don't understand the diff, and that's fine, OSX is a fine OS for most, but for me Linux is the only way to go to have complete freedom.
I found this out this weekend, I dnld some songs (one of the 'Exclusive EPs' they handle) on my iBook. Thing is I don't have a burner on my iBook, so I scp'd them over to my linux workstation where I have my burner. I figured I could strip the DRM on the linux side just so I could burn it to a CD (the only reason I wanted the tracks), but now I can't. So, I can listen to the songs on my iBook, or iPod, but not on my stereo. Not a big deal, I can always go to a friends house who has a burner on her iBook, redownload the tracks and burn them there (only out 5$ and some change), but still, it's kinda fishy.
I realize I'm a strange case, but still, these are the first tracks I've bought from iTunes and I only did it because I thought I'd be able to burn them (which is allowed by Apple, you just can't burn them on the machine you didn't dnld them on).
Use Clam, I run ClamAV on my linux server, but they have a OS X client (GUI) out now: ClamXav is a free virus checker for Mac OS X. It uses a slightly modified version of the tried, tested, and very popular clamav open source antivirus engine as a back-end.
Slashdot Mirror
I'm going to implement spamd (the tarpit), that's about as proactive I am at going out of my way on offence with my network. Up till now it's all be defense. What else can I do from a FreeBSD server, or an OpenBSD pf firewall box?
bo
Is there a PCI-e card that I can buy to replace my OEM ATI card that'll use these free drivers? The card is pretty new, 128Megs and such, but slow, so if I could buy an upgrade *and* get away from the ATI drivers, I will...
bo
Funny, I got abused on #debian 2 years back, and it was one of the reasons I didn't stick with Deb for too long. I had some noob questions, I didn't understand why I couldn't dnld a sarge iso, and yes, I read the site and tried to understand why before I asked. I got some a*hole responses, finally figured it out myself, but I was very cautious when asking questions. Once I had mixed stable/test/unstable packages and borked my desktop, I drifted towards Gentoo, and the friendly support via forums and IRC was awesome. Thus began my work on the Gentoo project. I would have done the same for Debian, but I don't want to be all high and mighty and not answer any questions from noobs; we were all there at one time.
bo
Perhaps BSD and it's licencing won't go unnoticed after GPL 3.0. Think about it, it may offer companies more freedom in the long run. I'm just sayin'.
bo
Previous /. THREAD
Djbdns site with a ton of good information
I like it.
bo
Mandriva? Haha, good one, but April fools was a few days ago. How I pine for Linux distro names that had nothing to do with the company/group distributing it; Rock Linux is perfect if you ask me. Not to mention Dragon Fly BSD or White Box Linux.
bo
I'll just wait here for the next shuttle, ya'll go ahead, and have a safe flight! M'k?
bo
Yep, it's a valid point, and thanks for it. So which would be better:
0 .6
../ip/root directory?
192.168.0.*
-or-
192.168.0/24
On my home network?
I guess best may be to list all IPs that need it, and nothing else:
192.168.0.2
192.168.0.3
192.168.0.4
192.168.
192.168.0.7
Would I just 'touch' each as a file name in
Thanks!
bo
Good points, I do not have FORWARD_ONLY set, and I am using the default DNS list in ../servers/@ that was in there when I installed. I am wondering if I should add my DNS servers from my ISP (Speakeasy) to the top of that list, or just leave them out altogether. Docs on multiple sites were not specific about this. Advice? Which is safer?
bo
- "dnscache does not cache (or pass along) records outside the server's bailiwick; those records could be poisoned. Records for foo.dom, for example, are accepted only from the root servers, the dom servers, and the foo.dom servers."
Djbdns"dnscache is immune to cache poisoning."
While I don't think I'm in the clear because of this, I feel better protected from the (unwashed ;)) internet. Anyone care to comment, please do, as I've just started using this and want to know how effective it is.
bo
boiled coffee? I'm a gentoo user, and I can't think of liking any kind of boiled coffee, regardless of how overzealous you are about it. bo
Damn, right you are. I hate how Americo-centric we are. Sorry for the error /. editors, and thank you, may I have another?
bo
http://en.wikipedia.org/wiki/April_Fool%27s_Day
consider yourself warned!
bo
[tiger woods]: The new Apple Tiger, it's Grrreeeeaaaat!!!
bo
uggg, here comes the April fools jokes on /. -- sorry, a few years ago it was fun, but now...not so much.
Oh well, at least Apple has a sense of humor.
bo
Why wouldn't they want to punish this person? At the very least they should hold him accountable for loss business (although how much could they loose, really?) All in all a more understanding MS than we've seen in the past. bo
Yep, I know, I love it though, not sure why. I'm a freak, I'll admit it, but hey, someone has to do it. Plus I can get as surly as I want at work, in 10 years I see myself as the "here's a quarter, buy yourself a better computer" guy. bo
Good point, this was 7 years ago, I suspect the jobs they moved to California are likely over there now. It was low level tech support, walking people through getting their DOS based Origin games running under Windows 95. Yeah, walking people thru creating a boot disk with a custom AUTOEXEC.BAT so that the system could play the old games...damn, I can't imagine anyone dealing with that for long now. Oh well, now they just have an easy to follow flowchart to follow. Then if there's any problem..."sorry, my mananger is in a meeting". bo
I worked at Origin in Austin for a time, but once EA (parent company) wanted to move tech support out to San Mateo, that was it for us. Sure, they offered us a job if we moved out there, but no raise in pay. Stand of living is a bit more out there, so it was no an option. Still, I saw some very dedicated ppl working there, but unfortunately they were expendable when their product grew old. I had allot of fun there, but sometimes it was very depressing. I'd rather admin unix boxen for a dot com. bo
Airport is fully supported, that's what I use. No, Airport Exreme is not, and that's not Linux or Apple's fault, it's the chipset manufacturer. Still, you can use a PCMCIA wireless card in it's place on the Powerbooks, and be fine. As for it being a glorified terminal, isn't any computer? :) Seriously though, I am just able to configure everything the way *I* want it, and then get to work. As a sysadmin I don't need office apps, I need a good term, a good mail client, and a good browser. In Linux, I have all I need (save for a right mouse button), and nothing I don't.
As for battery, I haven't timed it, but at work I rarely need to plug it in, of couse I'm using the new powernowd power daemon, which I now complely prefer over CPUfreq. It's more flexable, allowing for squeezing out even more juice over time.
bo
I'll agree with you completely; using the button combo for right click/paste click sucks. I can jack in a nice mini-mouse with a wheel when I'm at a desk, but that's rare. I know Apple is developing a two button mouse now, will be interesting if they put it out on their laptops. Even two buttons would be better, then you could emulate the 3 buttons by hitting both at once for paste. bo
Price: I got my G3 800Mhz iBook for ~920$ a year and a half ago.
Power: battery staying power is much better on the macs (currently)
Support: Devs have much less crazy hardware to support on the PPC/Apple side, thus everything being supported.
Freedom: To explain why I feel more comfortable in Linux than OSX is inpossible, I just do. Yes, I can download/compile all that stuff on OSX, but what if I want to run Fluxbox, and not the OSX desktop? I can't. I can run both in OSX, but why? Instead I can run Linux, choose whatever the hell I want/don't want, and even have the option to run Mac on Linux http://www.maconlinux.org/ and do whatever the hell I want. Listen to iTunes while in Linux? Use iPhoto in Linux? No problem.
bo
I have an iBook, and love it, however I run Linux on it, Gentoo before, Ubuntu currently. All funcitions are supported, it's a perfect match in my opinion. Ppl that gripe "why would you run Linux instead of OSX, OSX is BSD!" just don't understand the diff, and that's fine, OSX is a fine OS for most, but for me Linux is the only way to go to have complete freedom.
bo
I found this out this weekend, I dnld some songs (one of the 'Exclusive EPs' they handle) on my iBook. Thing is I don't have a burner on my iBook, so I scp'd them over to my linux workstation where I have my burner. I figured I could strip the DRM on the linux side just so I could burn it to a CD (the only reason I wanted the tracks), but now I can't. So, I can listen to the songs on my iBook, or iPod, but not on my stereo. Not a big deal, I can always go to a friends house who has a burner on her iBook, redownload the tracks and burn them there (only out 5$ and some change), but still, it's kinda fishy.
I realize I'm a strange case, but still, these are the first tracks I've bought from iTunes and I only did it because I thought I'd be able to burn them (which is allowed by Apple, you just can't burn them on the machine you didn't dnld them on).
bo
http://mac.softpedia.com/get/Antivirus/ClamXav.sht ml
bo