- Arch-general - lists.archlinux.org

[arch-general] simple iptabels question
by aerospace1028＠hotmail.com 22 Jul '10

22 Jul '10

Hello, I have a question on iptables. On the arch wiki, the tutorial on a simple stateful firewall includes the creation of the following rule. # iptables -A INPUT -p tcp --syn -m state --state NEW -j OPEN-TCP Which, to my understanding, meant only pass new TCP streams with the syn flag (the initialize connection or handshake part 1 of 3) to the user defined chain. When I checked the output of iptables, I noticed the following rule. # iptables -L INPUT --line-numbers -v 7 OPEN-TCP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN state NEW Why is iptables also using the FIN, RST and ACK/SYN flags? Did I not request SYN only like I thought the tutorial said? _________________________________________________________________ The New Busy is not the old busy. Search, chat and e-mail from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:…

2 1

[arch-general] Archlinux Wiki Backup
by Francesco Turco 22 Jul '10

22 Jul '10

Hello, As I said in the forums (https://bbs.archlinux.org/viewtopic.php?id=94201) I started contributing to the wiki (minor edits for now), but I'm concerned about the absence of a proper way to obtain a snapshot of it for backup reasons. I looked at the arch-wiki-docs package, but it's only a collection of HTML pages, with no source code, no discussions, no revisions, and not working hyperlinks. This way, it would be hard to restore the wiki after a crash. Other wikis provide a backup: please see http://download.wikimedia.org/ and http://en.gentoo-wiki.com/wiki/Gentoo_Linux_Wiki:Backup. To reduce bandwidth usage, we can use Bittorrent, just as with ISO releases. What do you think? Thanks.

1 0

[arch-general] All kdemod3 menu apps in "Lost & Found" menu folder + control panel apps gone - how to get back?
by David C. Rankin 21 Jul '10

21 Jul '10

Guys, Help! Something (probably that fricking kde4) has caused almost every menu item to end up in the "Lost & Found" kde3 menu folder off the main menu. I don't know where that folder is so I can try an move the items back. Also, what ever happened also caused all kde3 control panel entries to disappear from the control panel. Now I don't have a control panel any more: 23:22 alchemy:/opt/kde/share/applications/kde> kcmshell --list The following modules are available: Huh? The only thing I have done menu wise is to edit the Gnome menu, but that shouldn't have trashed my kde3 menu and control panel. Can anyone offer any ideas where all the missing apps are. Where is this "Lost & Found" place all the menu items went? Here is a screenshot of what I see when I move over the "Lost & Found" menu item. (131k) http://www.3111skyline.com/dl/Archlinux/bugs/kde3-lost+found-menu.jpg It is frustrating as hell to have everything setup just the way you like it and then have some unrelated process fsck it all up. I've been in gnome for the past week or so and this is the first time I've booted back to kde3. Go figure. Any ideas? I have had the disappearing menus and control panel issue before in kde3 on SuSE, but never in Arch - now Arch has been bitten by this bug. Hopefully we can find the cause. Surely alacarte is to blame... Is it? -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com

2 8

[arch-general] $BROWSER variable and Google Earth
by F. Gr. 21 Jul '10

21 Jul '10

Hi, Google Earth can't recognise the $BROWSER environment variable. I've set the one in my '~/.zshrc' as follows: " export BROWSER="/usr/bin/icecat" " When I try to open an external link I get the following error: <http://www.imagebam.com/image/a79e8989327021>. That Italian message means: "cannot start up a web browser. Check to have set the $BROWSER environment variable to the web browser filename you want to start up." I don't know why. Cheers

6 8

[arch-general] Archweb package update script
by Dan McGee 21 Jul '10

21 Jul '10

On Wed, Jul 21, 2010 at 5:45 AM, Netanel Shine <netanelshine(a)gmail.com> wrote: >> >> Date: Sun, 18 Jul 2010 21:36:42 -0500 >> From: Dan McGee <dpmcgee(a)gmail.com> >> Subject: Re: [arch-general] RSS feed - missing feature|problem >> On Mon, Jul 12, 2010 at 3:59 AM, Netanel Shine <netanelshine(a)gmail.com> >> wrote: >> > Hey all, >> > >> > My name is Netanel Shine, and a few days ago i began the process of >> building >> > an israeli community of archlinux. I used a git clone to set up the main >> > site. (like some other great projects file that archlinux git have to >> offer >> > like the wiki and the forums) >> > Everything went smoothly and just works great, except for one problem - >> the >> > package rss feeds. >> > >> > The site address is: http://archlinux.org.il - under heavy development. >> > >> > The problem: As you all can see, the left rss box with the latest updates >> > dont work and the list is empty. - because the system comes with an >> > integrated "packages" part (you can see it here: >> > http://archlinux.org.il/packages - not gonna use it), so the rss list >> > updates from here (i guess) >> > >> > After discussions with some great people (in the irc) we concluded that >> the >> > rss box pull`s the data from the 'models.Package' object - that connected >> to >> > archlinux mainsite DB (Package.objects=PackageManager()), so if i dont >> have >> > any access for the database - thats not gonna work. >> > >> > All sorts of ideas were came up like bulding a script that will do the >> job >> > or, a an iframe that will copy the box from the mainsite (but the problem >> it >> > will not be in hebrew) and an idea to replace the table that has for >> update >> > in pkg_updates. (with logic that pulls from the feed) - but thats not >> easy >> > because the logic is a wrapped up in django MVC. >> > >> > So dear friends, i turn to you for help - and I`m sure I would find it. >> >> Check out the reporead command baked into manage.py- you can very >> easily populate the package DB yourself. >> >> I have a small script I can send you for this, but I don't have it >> handy at the moment. Let me know if that would be useful to you. >> >> -Dan > > First of all, I sorry for seeing this message just now. > Thanks Dan, I appreciate your comment, and i would like to have the script > you're talking about , please send him to: netanelshine at gmail dot com ;) Something like the following: $ cat projects/archweb/fetch_update_package_db.sh #!/bin/bash -e # run at nice 3. it can churn quite a bit of cpu after all. renice +3 -p $$ > /dev/null # setup paths DLURL="ftp://ftp.archlinux.org" SPATH="/path/to/archweb" SCRIPT="${SPATH}/scripts/reporead.py" TMPPATH="/tmp/updaterepos" ARCHES="i686 x86_64" REPOS="core extra testing community community-testing" startdir="$(pwd)" [ ! -d ${TMPPATH} ] && mkdir ${TMPPATH} for arch in ${ARCHES}; do [ ! -d ${TMPPATH}/${arch} ] && mkdir ${TMPPATH}/${arch} for repo in ${REPOS}; do #[ ! -d ${TMPPATH}/${repo} ] && mkdir ${TMPPATH}/${repo} #cd ${TMPPATH}/${repo} echo "Updating ${repo}-${arch}" cd $TMPPATH/${arch} wget -N ${DLURL}/${repo}/os/${arch}/${repo}.db.tar.gz #${SCRIPT} ${arch} ${TMPPATH}/${arch}/${repo}.db.tar.gz cd "$startdir" ./manage.py reporead ${arch} ${TMPPATH}/${arch}/${repo}.db.tar.gz echo "" done done

2 2

Re: [arch-general] arch-general Digest, Vol 69, Issue 37
by Netanel Shine 21 Jul '10

21 Jul '10

> > Date: Sun, 18 Jul 2010 21:36:42 -0500 > From: Dan McGee <dpmcgee(a)gmail.com> > Subject: Re: [arch-general] RSS feed - missing feature|problem > On Mon, Jul 12, 2010 at 3:59 AM, Netanel Shine <netanelshine(a)gmail.com> > wrote: > > Hey all, > > > > My name is Netanel Shine, and a few days ago i began the process of > building > > an israeli community of archlinux. I used a git clone to set up the main > > site. (like some other great projects file that archlinux git have to > offer > > like the wiki and the forums) > > Everything went smoothly and just works great, except for one problem - > the > > package rss feeds. > > > > The site address is: http://archlinux.org.il - under heavy development. > > > > The problem: As you all can see, the left rss box with the latest updates > > dont work and the list is empty. - because the system comes with an > > integrated "packages" part (you can see it here: > > http://archlinux.org.il/packages - not gonna use it), so the rss list > > updates from here (i guess) > > > > After discussions with some great people (in the irc) we concluded that > the > > rss box pull`s the data from the 'models.Package' object - that connected > to > > archlinux mainsite DB (Package.objects=PackageManager()), so if i dont > have > > any access for the database - thats not gonna work. > > > > All sorts of ideas were came up like bulding a script that will do the > job > > or, a an iframe that will copy the box from the mainsite (but the problem > it > > will not be in hebrew) and an idea to replace the table that has for > update > > in pkg_updates. (with logic that pulls from the feed) - but thats not > easy > > because the logic is a wrapped up in django MVC. > > > > So dear friends, i turn to you for help - and I`m sure I would find it. > > Check out the reporead command baked into manage.py- you can very > easily populate the package DB yourself. > > I have a small script I can send you for this, but I don't have it > handy at the moment. Let me know if that would be useful to you. > > -Dan First of all, I sorry for seeing this message just now. Thanks Dan, I appreciate your comment, and i would like to have the script you're talking about , please send him to: netanelshine at gmail dot com ;) -- Netanel Shine

1 0

[arch-general] IPTables DDoS
by Nilesh Govindarajan 21 Jul '10

21 Jul '10

Hi, Can someone tell me how to use IPTables to prevent DDoS attacks? I'm sure IPTables has the relevant modules (limit, recent I think) after reading some docs, but still in doubt about its implementation. -- Regards, Nilesh Govindarajan Facebook: http://www.facebook.com/nilesh.gr Twitter: http://twitter.com/nileshgr Website: http://www.itech7.com VPS Hosting: http://j.mp/arHk5e

5 12

[arch-general] perl-authen-sasl: local (2.1401-1) is newer than community (2.15-1)
by Damjan Georgievski 21 Jul '10

21 Jul '10

This is what happens to me now # pacman -Syu ... :: Starting full system upgrade... warning: perl-authen-sasl: local (2.1401-1) is newer than community (2.15-1) I guess this happens because I have installed something from testing at one point, and anyway, I know how to override this warningm but.. The question is, should pacman think that 2.1401 is newer than 2.15 ? -- damjan

9 10

Re: [arch-general] [arch-dev-public] gcc 4.5 bug - what to do?
by Nezmer 20 Jul '10

20 Jul '10

On Tue, Jul 20, 2010 at 11:16:35PM +0200, Pierre Schmitz wrote: > On Tue, 20 Jul 2010 23:00:06 +0200, Thomas Bächler > <thomas(a)archlinux.org> wrote: > > Am 20.07.2010 22:52, schrieb Firmicus: > >> Yesterday I had bug report on a segfaulting binary for x86_64 that ships > >> with texlive-bin in testing: > >> http://bugs.archlinux.org/task/20199 > >> I have reported the bug upstream: > >> https://sourceforge.net/tracker/?func=detail&aid=3031498&group_id=145640&at… > >> > >> and as suspected it turned out to be a bug with gcc 4.5: > >> http://gcc.gnu.org/bugzilla/show_bug.cgi?id=45008 > >> > >> Now this means I have no means to include a working binary of dvisvgm > >> for x86_64 in texlive-bin until that bug is resolved, since I cannot > >> rely on gcc 4.4.x and no patch is available... > >> > >> What is the procedure you guys follow is such situations? > > > > Run in circles, scream and shout at people. Then after some time start > > crying. I have really no idea. > > A more practical approach would be to compile the package with gcc 4.4 > (there are mirrors containing old packages) and accept that this is an > ugly but temporary workaround. You should also open a bug report on our > bug tracker and link to the upstream one. Last but not least don't > forget to blame Allan. ;-) > A cleaner approach would be to build a gcc44 package, add "export CC=gcc44" in the PKGBUILD and the same for CXX and maybe CPP if used. This approach guarantees that someone using ABS to build packages will not get screwed and gives people supposedly reproducible results. I personally export a lot of variables in makepkg and set their values in "makepkg.conf". I even use a convenience variable "$GVER" which is set now to "45" in my system. It's also a good idea to add the dirname of the correct "libstdc++.so" to "$LIBS". Linking against different "libstdc++" versions is not fun. Using the correct "$GVER" can take care of all that. I'm not sure this will work with the way Arch packages gcc though.

1 0

[arch-general] How up to date does pacman keep Enlightenment(e17)???
by Joe(theWordy)Philbrook 19 Jul '10

19 Jul '10

I mean given that e17 is installed via pacman: When I do a pacman -Syu, how close to the current upstream version do I get? I'm pretty sure that all the module packages are listed as "svn" I think that's a version control thing designed to keep things up to date. And I think I remember reading something about the Arch way tending to keep packages real close to upstream versions. But While E17 works great on my up to date amd64 Gateway laptop, the same E17 on my amd64 HP Pavilion with Nvidia GeForce 6150 LE, also up to date however, wount allow me to make any changes to the shelf... I can't change it's appearance (except to the extent of accepting a theme's default changes) I can't add or remove gadgets to/from the shelf. I can't change the size of the shelf. I can't change it's position from bottom center to any other setting. Any attempt to do any of the above leaves me with a "This is very bad..." pop-up that wants me to either select [restart (changes not saved)] or [exit (entire configuration messed up. Wind up deleting the entire ~/.e/* tree and redoing the keyboard shortcuts, desktops areas, backgrounds, theme, focus settings etc...] But I don't know if I should ask about this here or if it's actually close enough to the pure upstream version that I should inquire of the enlightenment users mailing list instead??? It's not a major issue for me, BTW. I work around it by positioning desktop gadgets I want on top of the shelf gadgets I don't want via the <ctrl>+<alt>+G immutable shortcut... Still if I've got a truly current e17 then maybe the E17 team should hear of the problem??? If not then perhaps whoever it is that updates the svn packages in community should be aware that on the same machine using the e17 provided with apt-get (both an up to date PCLOS2010 and an up to date Xubuntu Karmic installation) let me make these changes. Note: in all three cases the installer/package-manager provided Nvidia driver was installed. -- | ~^~ ~^~ | <?> <?> Joe (theWordy) Philbrook | ^ J(tWdy)P | \___/ <<jtwdyp(a)ttlc.net>>

2 2