[cobalt-users] how do i disable cgiwrap once for all ?

[Francois <tilleul@xxxxxxxxxx>]

> Send cobalt-users mailing list submissions to
> 	cobalt-users@xxxxxxxxxxxxxxx
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://list.cobalt.com/mailman/listinfo/cobalt-users
> or, via email, send a message with subject or body 'help' to
> 	cobalt-users-request@xxxxxxxxxxxxxxx
> You can reach the person managing the list at
> 	cobalt-users-admin@xxxxxxxxxxxxxxx
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of cobalt-users digest..."
> Today's Topics:
>    1. Re: FTP App or help needed. (Carrie Bartkowiak)
>    2. LIST MODERATORS PLEASE READ (Carrie Bartkowiak)
>    3. Re: Very strange thing happening - Read This - (Carrie Bartkowiak)
>    4. Re: Call To Arms Against New.Net (Carrie Bartkowiak)
>    5. Re: Append old mail to new? (Carrie Bartkowiak)
>    6. RaQ2 updates (William Plunkett)
>    7. Re: Editing /etc/cobalt/messages/en_US/ui.po and using GetText ...
> (Cobalt)
>    8. Re: open relay search (Steve Werby)
>    9. Re: PortSentry ain't impotent (Carrie Bartkowiak)
>   10. Re: Call To Arms Against New.Net (Carrie Bartkowiak)
>   11. Re: PortSentry ain't impotent (shimi)
>   12. Re: inetd.conf (Carrie Bartkowiak)
>   13. Re: Hacked? Telnet gone, SSH gone, strange ports open (Carrie
> Bartkowiak)
>   14. Determining the packages installed? (Brad Hubbard)
>   15. SSH questions (Todd Kirk)
>   16. strange things happening with a raq4 (Francois)
>   17. RE: how do the hackers find your Raq? (Rob van Eijk)
> --__--__--
> Message: 1
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] FTP App or help needed.
> Date: Tue, 22 May 2001 16:25:39 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>> Is there an FTP application on the Cobalt Raq2 or something I can
> download
>> to FTP multiple files to and from the cobalts without doing each
> file
>> independently?... If I use Mget or Mput, it only works with files,
> not with
>> directories... or am I missing something?
> All FTP programs that I know of will do this.
> Simply highlight all of the files that you want to move (by holding
> down the CTRL key while clicking on each file) and then hit the button
> to transfer them.
> WS_FTP Lite (free) does this, as well as moving entire directories.
> Click on a directory, hit the transfer button, and when it asks if you
> want to move the entire directory, click Yes.
> CarrieB
> --__--__--
> Message: 2
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Date: Tue, 22 May 2001 16:29:40 -0400
> Subject: [cobalt-users] LIST MODERATORS PLEASE READ
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
> LIST MODERATORS:
> PLEASE REMOVE THESE ADDRESSES FROM THE LIST SO WE STOP GETTING
> SPAMMED!!!
> support@xxxxxxxxxxxxx
> ircservices@xxxxxxxxxxxxx
> The first sends vacation replies to the list, the second sends bounce
> replies directly to us whenever we post something. The second one has
> been going on for WEEKS now.
> Get them off of the list!!
> CarrieB
> --__--__--
> Message: 3
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] Very strange thing happening - Read This -
> Date: Tue, 22 May 2001 16:56:15 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>> How it started: I was uploading with LeechFTP to that address
>> that now ignores me. I had 10 threads open and was uploading
>> across ethernet. Something jammed (cobalt server i presume) and
>> the transfers were aborted only to find I could no longer connect
>> to that IP address. I did FTP into one of the others to finish
>> my upload. But that ip address ignored that machine for 3 days.
>> Reboots did not resolve it. It just went away on its own!
> >
>> What causes this?
> Your connection timed out, overloaded, whatever... and you were
> blocked. No big deal, except that it was three days.
> Usually when this happens it lasts from a few seconds to a few
> minutes.
> It's like getting a huge file through POP and suddenly the connection
> goes funky. The POP box is still locked, waiting for the rest of that
> file. It keeps waiting and waiting and waiting - computers are stupid,
> remember. Finally it gives up and unlocks the POP box - if you're
> lucky.
> If you're not, you have to call your ISP to go unlock it for you.
> Same deal; you just have to figure out why your 'connection refused'
> length is 3 whole days. Egads.
> CarrieB
> --__--__--
> Message: 4
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] Call To Arms Against New.Net
> Date: Tue, 22 May 2001 16:59:56 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
> I've been thinking about this, and it's very disturbing.
> Pros: (there's only one)
> 1. This gives people a way to register cool names like happy.kids.
> Which, I agree, we need!  I am all for restricting porn sites to a
> ..xxx extension; and for putting cool TLDs into place for really
> creative domain names.
> Cons:
> 1. When ICANN goes through its next TLD application process and
> approves these domain names (which I heartily believe it will; I think
> it kept the list small this time to fine-tune the process of adding
> new TLDs to the marketplace); which version of the website will we be
> sent to? The *real* version registered with an ICANN-accredited
> registrar, or the New.Net version?
> 2. This encourages other server hosts to do the same thing; anyone
> with a server can do this. What if everyone on this list suddenly put
> their own version of Buy.Com on their server, and offerered a (cough)
> "plugin" (registry hack) so that people could see it rather than the
> real one? There'd be 300+ versions of Buy.Com floating around out
> there. Who's to say that you bought something from the *real* one -
> what if your ISP sends you to one of the fake ones and you buy $400
> worth of equipment, and that web site owner just takes the money and
> never sends you anything?  You're gonna call up Buy.Com raising hell,
> and they're not going to have any record of your order, you have no
> recourse... etc. etc. etc.
> 3. Now imagine if you were Buy.Com and the above was going on!!
> 4. The whole plug-in deal. Keep your hands off of my registry, my
> TCP/IP protocols, etc. I'll do it myself if I want to, thank you.  And
> the New.Net customers who don't read the fine print are getting
> royally screwed - imagine pushing tons of money into a domain name
> that most of the world can't see!
> As an internet surfer, I am really torn on this issue, because of the
> one and only 'pro' to the situation. But as a business owner, I am
> flaming mad about it; because this can and will cause all types of
> havok, trademark infringement, copyright infringement, slander and
> libel lawsuits etc. once ICANN puts these TLDs (and it will) into use.
> As an @Home user, I am royally pissed that my ISP would agree to send
> me to these domains; knowing what kind of bull can (and will) happen
> down the road a year or two from now. I can't believe they'd enter
> into something that is bordering on illegal activity... it's not YET,
> but once ICANN says okay to .shop (for example) - who's going to be
> breaking copyright laws? The New.Net version of somecompany.shop, or
> the ICANN version of somecompany.shop??
> And as a web host, I have no idea where I stand. Do I support the
> people, who are demanding cool new TLDs? Or do I support ICANN, the
> non-profit organization that has the only power available to keep
> situations like #2 and #3 above from happening?
> It's almost like "what the people want" vs. "Big Brother".  To host
> them or not to host them, that is the question.
> I don't like it at all.
> How are the rest of you leaning?  Are you going to host these new
> domains, or boycott them?
> And yes Dan, I know this isn't Cobalt-related. However, I respect the
> opinion of many other web hosts on this list (including you) and I
> *really* want to know what the people I respect think about this
> issue.
> PS - Like I said, I'm on @Home, and I can't see the new domains. So
> either they haven't fulfilled their end of the "partnership" yet, or
> they just haven't changed the name servers in my area.
> CarrieB
> --__--__--
> Message: 5
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] Append old mail to new?
> Date: Tue, 22 May 2001 18:10:55 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
> For anyone looking in the archives, I found the answer.
> This can be done.
> # cat old.file >> new.file
> This will append the contents of old.file onto the end of new.file.
> Ta-da!
> Gotta love Google.  ;)
> CarrieB
> --__--__--
> Message: 6
> From: "William Plunkett" <wjptcs@xxxxxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Date: Tue, 22 May 2001 17:12:24 -0500
> Subject: [cobalt-users] RaQ2 updates
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>> We recently got a replacement RAQ2 unit to replace one that died under
>> warranty. When we try to install patches to it we get this error ( No
>> Updates Found). We have downloaded all the current patches to a local
>> machine and can perform updates on all of our other RAQ units except the
>> RAQ2 units. Any suggestions.
> >
>> It might have been possible that someone tried to run an update for a
>> cacheRAQ2 on a RAQ2 before I stopped them. They got an error that said
>> something about wrong version I believe.
> >
> >
> How are you transferring the packages? Have you tried via Telnet? e.g.:
> [root admin]# wget
> http://ftp.cobalt.com/pub/packages/raq2/eng/RaQ2-en-Update-OS-3.0.pkg
> and
> [root admin]# /usr/local/sbin/cobalt_upgrade RaQ2-en-Update-OS-3.0.pkg
> Substitute the package name and path for whatever you're trying to retrieve
> from Cobalt.
> Each of the above should be on one line since it will wrap in email.
> --
> Dan Kriwitsky
> 
> That worked, Thanks
> --__--__--
> Message: 7
> From: "Cobalt" <cobalt@xxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] Editing /etc/cobalt/messages/en_US/ui.po and
> using GetText ...
> Date: Wed, 23 May 2001 00:57:23 +0200
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>> I really dont understand how to use Gettext.. Could you please give
> me a
>> clear example, that would be very much appreciated.
> Extracted from gettext user's manual you can find at www.gnu.org :
> ******************************************************************
> Chapter 6: Producing Binary MO Files
> 6 Producing Binary MO Files
> 6.1 Invoking the msgfmt Program
> Usage: msgfmt [option] filename.po ...
> '-a number'
> '--alignment=number'
> Align strings to number bytes (default: 1).
> '-h'
> '--help' Display this help and exit.
> '--no-hash'
> Binary file will not include the hash table.
> '-o file'
> '--output-file=file'
> Specify output file name as file.
> '--strict'
> Direct the program to work strictly following the Uniforum/Sun
> implementa-
> tion. Currently this only affects the naming of the output file. If
> this option is
> not given the name of the output file is the same as the domain name.
> If the
> strict Uniforum mode is enable the suffix '.mo' is added to the file
> name if it is
> not already present.
> We find this behaviour of Sun's implementation rather silly and so by
> default
> this mode is not selected.
> '-v'
> '--verbose'
> Detect and diagnose input file anomalies which might represent
> translation er-
> rors. The msgid and msgstr strings are studied and compared. It is
> considered
> abnormal that one string starts or ends with a newline while the other
> does
> not.
> Also, if the string represents a format sring used in a printf-like
> function
> both strings should have the same number of '%' format specifiers,
> with match-
> ing types. If the flag c-format or possible-c-format appears in the
> special
> comment h #, i for this entry a check is performed. For example, the
> check will
> diagnose using '%.*s' against '%s', or '%d' against '%s', or '%d'
> against '%x'. It
> can even handle positional parameters.
> Normally the xgettext program automatically decides whether a string
> is a
> format string or not. This algorithm is not perfect, though. It might
> regard a
> string as a format string though it is not used in a printf-like
> function and so
> msgfmt might report errors where there are none. Or the other way
> round: a
> string is not regarded as a format string but it is used in a
> printf-like function.
> So solve this problem the programmer can dictate the decision to the
> xgettext
> program (see Section 3.4 [c-format], page 21). The translator should
> not con-
> sider removing the flag from the h #, i line. This "fix" would be
> reversed again
> as soon as msgmerge is called the next time.
> --__--__--
> Message: 8
> From: "Steve Werby" <steve-lists@xxxxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] open relay search
> Date: Tue, 22 May 2001 19:10:01 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
> Tim M. Muldoon" <tmuldoon@xxxxxxxxxxxxxx>" wrote:
>> I get these every couple of days, this is a domain I host. Is this just
>> somebody trying common names looking for an open relay?
> >
>> May 20 14:28:10 ns1 sendmail[12349]: OAA12349: <info@xxxxxxxxxxxxxxx>...
>> User unknown
>> May 20 14:28:11 ns1 sendmail[12349]: OAA12349:
> <sales@xxxxxxxxxxxxxxx>...
>> User unknown
>> May 20 14:30:14 ns1 sendmail[12399]: OAA12399:
>> <webmaster@xxxxxxxxxxxxxxx>... User unknown
>> May 20 14:30:14 ns1 sendmail[12399]: OAA12399:
> <contact@xxxxxxxxxxxxxxx>...
>> User unknown
> If the email addresses never existed that's probably exactly what's
> happening.  At least they're trying pretty common email aliases.  I have
> spammers trying very odd email aliases hundreds at a time.
> --
> Steve Werby
> President, Befriend Internet Services LLC
> http://www.befriend.com/
> --__--__--
> Message: 9
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] PortSentry ain't impotent
> Date: Fri, 25 May 2001 02:29:31 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>> Except you should not have to reboot,
> I didn't know what to restart in order to reload the hosts table.
> Hints?  :)
> CarrieB
> --__--__--
> Message: 10
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] Call To Arms Against New.Net
> Date: Fri, 25 May 2001 02:34:56 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
> All that spam you just got from me was sent on Tuesday - so forgive
> the seemingly belated replies and/or change of mind.
> Go with the most recently *sent* babbling from me.
> Sigh. The list is up to 4-day waits on some postings now... what do
> you think, a week or two before it shuts down for a day?
> CarrieB
> --__--__--
> Message: 11
> Date: Fri, 25 May 2001 00:00:29 -0700 (PDT)
> From: shimi <shimi@xxxxxxxxxxxxxxxx>
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-users] PortSentry ain't impotent
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
> On Fri, 25 May 2001, Carrie Bartkowiak wrote:
>> > Except you should not have to reboot,
>> 
>> I didn't know what to restart in order to reload the hosts table.
>> Hints?  :)
>> 
>> CarrieB
>> 
> well I think that a .sh like this:
> #!/sbin/sh
> cd /etc/sysconfig/network-scripts
> ../ifdown eth0
> ../ifup eth0
> run the script with: scriptname.sh &
> (don't forget the & - it takes it to the background, otherwise the first
> command (ifdown) will disconnect you, and the second will never happen and
> your cobalt will disappear from the net.)
> It's better to be in contact with the NOC whenever you do such dangerous
> thing, so they can boot manually if something goes wrong :-)
> - shimi.
> --__--__--
> Message: 12
> From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Subject: Re: [cobalt-users] inetd.conf
> Date: Tue, 22 May 2001 23:10:39 -0400
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>> smbd2  stream  tcp     nowait root    /usr/sbin/in.smb
>>  in.smb
Since i'm the only user on my raq4 and that I have several problems because of cgi wrap (and I read elsewhere that I could have more problems in the future), I'd like to know a proper way to disable cgi wrap for good. So far, I've followed instructions here and there (add AddHandler cgi-script line in httpd.conf et al) but it only brought more problems ... 

thank you 

-- 
Francois